The campaign exploited long-patched VMware vulnerabilities to hijack ESXi hosts, bypass defenses, and persist inside targets.

Fire Ant's breach of the virtualization management layer is achieved by the exploitation of CVE-2023-34048, a known security ...

Chinese-linked "Fire Ant" group exploits hypervisor and network-layer blind spots to maintain covert access across enterprise ...

Sygnia observed Chinese cyber campaign dubbed Fire Ant deploying sophisticated techniques to gain full compromise of victim ...

Chinese cyberespionage group Fire Ant is targeting virtualization and networking infrastructure to access isolated environments.