A new bad actor called Tortilla is running the campaign, and most affected users are in the U.S.

Cisco Security examines the most frequently encountered MITRE ATT&CK tactics and techniques.

The goal is to reduce civilian federal agency exposure to attacks that threat actors are actively using in campaigns, agency says.

Dozens of companies and universities regularly scan the Internet to gather data on connected devices, but some firms are looking deeper to uncover the extent of detectable malware infections.