Fire Ant is now targeting routers, authentication servers, and Linux management hosts, using them as stepping stones.