DKnife Linux Toolkit Used for Cyber-Espionage Since 2019

DKnife, a Linux toolkit, has been used since 2019 to hijack router traffic and distribute malware in cyber-espionage attacks. Cisco Talos discovered this powerful toolkit, which allows malicious actors to monitor and control network traffic via routers and edge devices. DKnife inspects and modifies data in transit and installs malware on PCs and phones.