Tag: reverse tunneling

1 Attack Reports | 0 Vulnerabilities

Attack reports

UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager

A Chinese-nexus advanced persistent threat actor, UAT-9686, is actively targeting Cisco AsyncOS Software for Secure Email Gateway and Secure Email and Web Manager. The campaign, ongoing since late November 2025, exploits non-standard configurations to execute system-level commands and deploy a pers…
backdoor
apt
chinese threat actor
email security
2025-12-17
aquapurge
aquashell
aquatunnel
cisco asyncos
log purging
reverse tunneling
Published: December 17, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports