Badcandy Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
11
occurrences
First Seen
October 31, 2025
Last Seen
December 11, 2025

Related Threat Clusters

Recent Intelligence Reports

  • Chinese hackers exploited Cisco training to help build Salt Typhoon attacks — Sdxcentral · December 11, 2025
  • Badcandy: Old Cisco IOS XE vulnerability still misused thousands of times — Heise.De · November 5, 2025
  • Hackers targeting Cisco IOS XE devices with BadCandy implant — Cybersecuritydive · November 5, 2025
  • BADCANDY webshell spread via vulnerable Cisco IOS XE device targeting — Scworld · November 3, 2025
  • Scores of Australian Cisco devices remain BADCANDY infected — Itnews.Au · November 3, 2025
  • Security Affairs newsletter Round 548 by Pierluigi Paganini — Securityaffairs.Co · November 2, 2025
  • Attackers Exploit Cisco IOS XE Vulnerability to Deploy BADCANDY Web Shell — Cyberpress · November 1, 2025
  • BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government — Securityaffairs.Co · November 1, 2025

CVSS v3.1 Breakdown