we have observed the threat actor capturing SNMP, TACACS, and RADIUS traffic, including the secret keys used between network devices and TACACS/RADIUS servers," Cisco said. "The intent of this ...

According to Cisco Talos, Salt Typhoon used stolen credentials and actively ... The group stole device configurations, often via TFTP/FTP, to gain access to sensitive information like SNMP strings and ...