LINE VIPER Malware Packet Capture Command on Cisco ASA

Yolanda Icepa@yicepa

•updated Sep 26, 2025•5•2•182

Detects the execution of a packet capture command with a specific buffer size known to be used by the LINE VIPER malware on Cisco ASA devices. LINE VIPER is a sophisticated malware designed to target Cisco ASA devices, often deployed by the RayInitiator bootkit.