WASHINGTON – The Cybersecurity and Infrastructure Security Agency (CISA) published a malware analysis report today on FIRESTARTER, malware that allows remote access and control by malicious threat actors targeting Cisco Firepower and Secure Firewall products running Adaptive Security Appliance (ASA) or Firepower Threat Defense (FTD) software. In conjunction with this report, CISA issued new required actions for Federal Civilian Executive Branch (FCEB) agencies in Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices . Threat actors continue to target these devices and products, posing significant risks to all organizations.

This malware analysis report, co-sealed with United Kingdom National Cyber Security Centre ( NCSC-UK ), provides organizations with the knowledge to help them detect and respond to FIRESTARTER.…