Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers

In a recent blog post, Mandiant revealed a critical threat: a China-nexus espionage group, UNC3886, has been deploying custom backdoors on Juniper Networks' Junos OS routers. This sophisticated attack leverages vulnerabilities in end-of-life devices to gain unauthorized access and potentially compromise sensitive data. Join Austin Larsen Principal Threat Analyst and Pete Boonyakarn Cyber Security Consultant for a live webinar as they delve deeper into this activity. We'll discuss the key findings of our investigation, including the techniques employed by UNC3886, the impact on affected organizations, and actionable steps to mitigate this threat. During this webinar, we will cover: - The intricacies of the UNC3886 attack, methods used, and how China-Nexus actors targeted Juniper devices - The impact on organizations and mitigation strategies - Best practices for network security infrastructure, including device hardening, vulnerability management, and threat intelligence