New Cuttlefish Malware Infects Routers to Monitor Traffic for Credential Theft

Black Lotus Labs says the malware has been active since at least July 2023. It is currently running an active campaign concentrated in Turkey, with a few infections elsewhere impacting satellite phone and data center services.