The Federal Bureau of Investigation (FBI) has issued a stark warning to the public, private sector, and international partners regarding persistent cyber threats from actors affiliated with the Russian Federal Security Service’s (FSB) Center 16.
This unit, recognized in cybersecurity circles under monikers such as “Berserk Bear” and “Dragonfly,” has been actively exploiting vulnerabilities in network infrastructure, particularly focusing on Simple Network Management Protocol (SNMP) and unpatched flaws in end-of-life Cisco devices.
A key vulnerability highlighted is CVE-2018-0171, which affects Cisco Smart Install (SMI) functionality, enabling unauthorized access and manipulation of device configurations.