New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials

**Cuttlefish** is a modular malware campaign targeting SOHO routers to stealthily monitor traffic, extract authentication data from HTTP GET/POST and target cloud-service credentials via eBPF-based sniffing, and perform DNS/HTTP hijacking or proxy/VPN exfiltration; active since mid-2023 and observed across ~600 IPs primarily in Turkey.