CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

	China continues cyberattacks on routers, this time targeting Juniper Networks devices Description: Researchers said the state-backed group dubbed UNC3886 was behind a campaign to deploy custom backdoors on the company’s Junos OS routers. Source: The Record March 13th, 2025 (3 months ago)
	China-Backed Hackers Backdoor US Carrier-Grade Juniper MX Routers Description: Mandiant researchers found the routers of several unnamed organizations (likely telcos and ISPs) were hacked by UNC3886, and contained a custom backdoor called "TinyShell." Source: Dark Reading March 12th, 2025 (3 months ago)
	Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits Description: The China-nexus cyber espionage group tracked as UNC3886 has been observed targeting end-of-life MX routers from Juniper Networks as part of a campaign designed to deploy custom backdoors, highlighting their ability to focus on internal networking infrastructure. "The backdoors had varying custom capabilities, including active and passive backdoor functions, as well as an embedded script that Source: TheHackerNews March 12th, 2025 (3 months ago)
	Written by: Lukasz Lamparski, Punsaen Boonyakarn, Shawn Chew, Frank Tse, Jakub Jozwiak, Mathew Potaczek, Logeswaran Nadarajan, Nick Harbour,... Description: Written by: Lukasz Lamparski, Punsaen Boonyakarn, Shawn Chew, Frank Tse, Jakub Jozwiak, Mathew Potaczek, Logeswaran Nadarajan, Nick Harbour, Mustafa Nasser Introduction In mid 2024, Mandiant discovered threat actors deployed custom backdoors on Juniper Networks’ Junos OS routers. Mandiant attributed these backdoors to the China-nexus espionage group, UNC3886. Mandiant uncovered several TINYSHELL-based backdoors operating on Juniper Networks’ Junos OS routers. The backdoors had varying custom capabilities, including active and passive backdoor functions, as well as an embedded script that disables logging mechanisms on the target device. Mandiant worked with Juniper Networks to investigate this activity and observed that the affected Juniper MX routers were running end-of-life hardware and software. Mandiant recommends that organizations upgrade their Juniper devices to the latest images released by Juniper Networks, which includes mitigations and updated signatures for the Juniper Malware Removal Tool (JMRT). Organizations should run the JMRT Quick Scan and Integrity Check after the upgrade. Mandiant has reported on similar custom malware ecosystems in 2022 and 2023 that UNC3886 deployed on virtualization technologies and network edge devices. This blog post showcases a development in UNC3886’s tactics, techniques and procedures (TTPs), and their focus on malware and capabilities that enable them to operate on network and edge devices, which typically lack security monito... CVSS: MEDIUM (6.7) Source: Google Threat Intelligence March 12th, 2025 (3 months ago)
	This is the FBI, open up. China's Volt Typhoon is on your network Source: TheRegister March 12th, 2025 (3 months ago)
	Podcast: We're Not Ready for Chinese AI Video Generators Description: We chat the lack of guardrails on China-based AI video models; how cops are using AI to summarize evidence from seized mobile phones; and the AI game that is making $50,000 a month. Source: 404 Media March 12th, 2025 (3 months ago)
	Under Pressure: US Charges China's APT-for-Hire Hackers Description: The US Justice Department on Wednesday announced charges against members of the Chinese-backed i-Soon "secret" APT and APT27, the latter implicated in January's Treasury breach. Source: Dark Reading March 6th, 2025 (3 months ago)
	U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations Description: The U.S. Department of Justice (DoJ) has announced charges against 12 Chinese nationals for their alleged participation in a wide-ranging scheme designed to steal data and suppress free speech and dissent globally. The individuals include two officers of the People's Republic of China's (PRC) Ministry of Public Security (MPS), eight employees of an ostensibly private PRC company, Anxun Source: TheHackerNews March 6th, 2025 (3 months ago)
	Feds name and charge alleged Silk Typhoon spies behind years of China-on-US attacks Source: TheRegister March 6th, 2025 (3 months ago)
	China's Silk Typhoon APT Shifts to IT Supply Chain Attacks Description: The nation-state threat group has been breaching providers of remote management tools, identity management providers, and other IT companies to access networks of targeted entities, according to Microsoft. Source: Dark Reading March 5th, 2025 (3 months ago)