Mandiant researchers discovered custom backdoors deployed by China-linked espionage group UNC3886 on outdated Juniper Networks Junos OS routers. These TINYSHELL-based backdoors aimed for long-term persistence and stealth, targeting internal networking infrastructure and ISP routers. The backdoors imitated legitimate binaries and bypassed Junos OS security mechanisms, which could potentially lead to privileged access abuse, network authentication service compromises, and further covert operations within affected systems. The incident highlights significant vulnerabilities within critical networking devices and represents a strategic threat to the defense, technology, and telecommunications sectors.
Source: https://securityaffairs.com/175308/apt/china-linked-apt-unc3886-targets-eol-juniper-routers.html
"id": "jun000031325",
"linkid": "juniper-networks",
"type": "Breach",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"