logo

New VPN Backdoor

ID: 5ae72c36-df10-5a63-9cc6-5baf55231304

STIX ID: report--5ae72c36-df10-5a63-9cc6-5baf55231304

Feed Name: Schneier on Security

Threat Score
75/100

Date Published: 2025-01-27

Date Updated: 2026-04-19

Author: Bruce Schneier

...
...

Researchers uncovered a memory-resident backdoor named J-Magic infecting Juniper Junos VPN devices; it remains dormant until triggered by a "magic packet," then performs an RSA-based challenge-response to verify access, making detection and unauthorized reuse difficult. The backdoor was found running in the networks of 36 organizations, discovered via VirusTotal and analyzed by security researchers, though the initial infection vector is not yet known.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.