The malware uses the infected devices' legitimate firmware update channels to maintain access to compromised systems by injecting malicious code and deploying repacked firmware images.

Despite the disruption of the Cyclops Blink botnet ... enables a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management ...