Cisco Offers Free Tool To Detect SYNful Knock Router Malware
Credit:
Tool helps businesses detect routers running known version of newly discovered malicious implant.
Cisco Systems enterprise users now have a way to check if their network routers might have been infected by the recently disclosed SYNful Knock malware.
The company yesterday released a new Python script that organizations can use to scan their networks for potentially infected routers. The free tool works by looking for routers on the network that answer to the malware’s specific “knock,” William McVey, technical lead at Cisco’s Talos Threat Intelligence group said in a blog post.