MITRE ATT&CKcampaign

C0050 J-magic Campaign

Published 2025-02-18 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.0
Created
2025-02-18

Description

The J-magic Campaign was active from mid-2023 to at least mid-2024 and featured the use of the J-magic backdoor, a custom cd00r variant tailored for use against Juniper routers. The J-magic Campaign targeted Junos OS routers serving as VPN gateways primarily in the semiconductor, energy, manufacturing, and IT sectors.

Related

Uses · MITRE ATT&CK (5)

  • S1203 J-magic software (malware)
  • T1583.003 Virtual Private Server sub-technique
  • T1587.003 Digital Certificates sub-technique
  • T1588.001 Malware sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique

References