Defense-related data was likely the objective of attacks

“The recovered logs record successful exploitation, including verification of root access by executing the id command through the installed webshell.”

“We recovered a custom PHP2Shell implementation tailored to the targeted firewall platform, version-specific profiles, exploitation logs and post-exploitation scripts”

“cyber shockwave ripping through our industrial heartlands”