United States of America

[Zardo]

Router nur noch aus US-Produktion

https://www.heise.de/news/USA-verbieten-...22044.html

Ab sofort lassen die USA nur noch im Inland hergestellte Router für Verbraucher zu. Solche Modelle gibt es aber nicht.

Hier mal ein Beispiel:

Threat actors have been observed targeting enterprise-grade Juniper Networks routers with a custom backdoor called J-magic.

J-magic is a variant of the publicly available cd00r backdoor. Researchers aren’t quite sure how exactly the backdoor is being installed on Juniper Networks routers. However, once installed, it continuously monitors for a ‘magic packet’ sent by the threat actors in TCP traffic. When this packet is received, J-magic establishes a reverse SSH shell to the IP address and port specified in the magic packet, allowing the threat actors to steal files and deploy additional payloads.

https://fieldeffect.com/blog/juniper-net...c-backdoor

Port knocking + magic packet = Sesam öffne dich

Falls es wen interesiert: https://thehackernews.com/2025/01/custom...acket.html

Evidence gathered by the company shows that the earliest sample of the backdoor dates back to September 2023, with the activity ongoing between mid-2023 and mid-2024. Semiconductor, energy, manufacturing, and information technology (IT) sectors were the most targeted.

Infections have been reported across Europe, Asia, and South America, including Argentina, Armenia, Brazil, Chile, Colombia, Indonesia, the Netherlands, Norway, Peru, the U.K., the U.S., and Venezuela.
[...]
The exact end goals of the campaign are currently unknown, but the Black Lotus Labs team told The Hacker News that it saw "some interesting targeting" that aligned with the strategic goals for a certain country known for intellectual property theft, specifically aimed at the microprocessor manufacturing and shipbuilding verticals.