I was curious to see if a QID was going to come out for this (if possible)?
I just checked and there is now a QID 38614 Cisco Routers SYNful Knock Malware Detected available in Qualys. Many thanks for the quick turnaround on this.
We're currently investigating it. I'll update again when we have more information.
QID 38614 Cisco Routers SYNful Knock Malware Detected
is planned to be released tonight under VULNSIGS-2.3.117-x (or higher version).
Retrieving data ...