The bad news: the crooks have your SSH private keys. The good news: only users of the “nightly” build were affected.
A pre-auth SQL injection bug leading to remote code execution is at the heart of a data-stealing campaign against XG firewalls, using the Asnarok trojan.
The malware is new and in the early stages of its development — but packs a sophisticated punch.