Tag: cd00r

1 Attack Reports | 0 Vulnerabilities

Attack reports

The J-Magic Show: Magic Packets and Where to find them

Black Lotus Labs has been tracking a backdoor attack targeting enterprise-grade Juniper routers. Dubbed J-magic, this campaign uses a passive agent that monitors for 'magic packets' in TCP traffic. Once activated, it establishes a reverse shell for device control and data theft. The campaign, activ…
2025-01-23
cd00r
juniper routers
j-magic
Published: January 23, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports