Eight Arms to Hold You: The Cuttlefish Malware

Executive Summary:

The Black Lotus Labs team at Lumen Technologies is tracking a malware platform we’ve named Cuttlefish, that targets networking equipment, specifically enterprise-grade small office/home office (SOHO) routers. This malware is modular, designed primarily to steal authentication material found in web requests that transit the router from the adjacent local area network (LAN). A secondary function gives it the capacity to perform both DNS and HTTP hijacking for connections to private IP space, associated with communications on an internal …

area arms authentication black lotus black lotus labs eight enterprise equipment executive found home home office labs local lotus lumen lumen technologies malware malware analysis material modular networking office platform requests router routers soho steal team technologies tracking web