Aviatrix Threat Research Center@aviatrixtrc
Active Exploitation
TRC analysis shows attackers exploited Cisco FMC authentication bypass (CVE-2024-20079) to gain root access, then used legitimate FMC tools for reconnaissance and lateral movement before deploying Qilin ransomware. Living-off-the-land techniques helped evade detection across victim networks. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/cisco-fmc-flaws-exploited-to-steal-credentials-and-deploy-qilin-ransomware-2026
Post summary
Attackers leveraged the Cisco FMC authentication bypass (CVE-2024-20079) to gain root access, used legitimate FMC tools for reconnaissance and lateral movement, and ultimately deployed Qilin ransomware across victim networks.
0000091
2.0K followersView on X