Skip to main content
CyberSingle-sourceHighDevelopingFeatured
6.8

Sandworm Upgrades Cyclops Blink Botnet, Chains Cisco Flaws

Russian APT group Sandworm is deploying an upgraded Cyclops Blink botnet by chaining Cisco vulnerabilities, marking a resurgence of a malware family the FBI disrupted in 2022. The upgrade suggests improved evasion and persistence capabilities, posing renewed threat to network infrastructure. Attribution is based on threat-intel reporting; operational impact and scope remain partially unverified.

Dark Reading2 days agoRU, USengCredibility 34%View source

Score Breakdown

Mosaic Score6.8
Confidence0.5
Significance0.8
Source credibility0.3

Intelligence Tags

Entities

countrycountryconcept
Source

Related signals

8 found