Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
Volexity reported that attackers modified the login pages of Cisco Clientless SSL VPN portals on ASA devices to implant JavaScript that steals employee credentials at login, with its earliest known abuse traced to November 2014 through CVE-2014-3393. The...