{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/fire-ant-trusted-infrastructure-router-authentication-defense/",
    "fang": "live",
    "exported_at": "2026-08-30T20:04:05Z",
    "total": 15,
    "categories": 3
  },
  "iocs": {
    "Domains": [
      "libseconfd.so"
    ],
    "sha1": [
      "13f0c2a598e3aa63856c032a96b110aed963f0e8",
      "1682b652a15bde732489f22809b0b7594c228fd3",
      "1aa6ab2006b5d9199aa87bb0bbd995aec698ac4f",
      "36005f5e4398a1c62a2a9271eddfcc1b44b1ad00",
      "5ba1242050b5b447052b210788a5a25593d6987d",
      "6ef7d2985edf743ebff413a9298a127e9475d72f",
      "7dab017f14628345d47bd4eb69cc49224f3054a7",
      "955cd45a2f6f226a2fdf44b329af1c8dde90cb38",
      "C164BFC953C66E58B11FC280E69FD43B8F255839",
      "b149fa3a34bd585e7a674a4fd9538437bd06f514",
      "be6b27f429324a4af05a310d8ec9635e37c68a94",
      "c164bfc953c66e58b11fc280e69fd43b8f255839"
    ],
    "CVEs": [
      "CVE-2021-44228",
      "CVE-2024-20399"
    ]
  }
}