Cybersecurity agencies have identified a custom backdoor known as Firestarter that targets Cisco ASA and FTD devices via specific vulnerabilities. The malware, linked to threat actor UAT-4356, utilizes a loader to extract credentials and establish persistent VPN-based access. This exploit poses a direct risk to network perimeter integrity and unauthorized access to sensitive financial infrastructure.

Relevant URL: https://www.bleepingcomputer.com/news/security/firestarter-malware-survives-cisco-firewall-updates-security-patches/