BlackTech actors are able to pivot from the trusted internal routers to other subsidiaries of the companies and the headquarters’ networks.” This is done by gaining access and administrator privilege over network edge devices like routers and modifying the firmware to set up backdoors, gain access to the larger corporate network, and execute other activities. The advisory notes that while it is not limited to Cisco routers, the group has been observed “[replacing] the firmware for certain Cisco IOS®-based routers with malicious firmware.”

Source: HotHardware