Hackers exploit Cisco SD-WAN flaw to deploy 'KeyDrift' malware, researchers say
Cisco Talos says UAT-11473 appears to overlap with Volt Typhoon's Silent Train network
A hacking group was observed exploiting a patched Cisco vulnerability to deploy a custom malware framework called KeyDrift in attacks on space and satellite services, defense and aerospace technology, and policy research organizations, Cisco Talos researchers reported. The group, tracked as UAT-11473, appears to overlap with the Chinese state-sponsored Volt Typhoon's 'Silent Train' covert access network, though Talos made no definitive links.