C0056 RedPenguin

active2024-07-01 – 2025-03-01

also known asRedPenguin

The RedPenguin project was launched by Juniper in July 2024 to investigate reported malware infections of Juniper MX Series routers. RedPenguin activity was separately attributed to UNC3886 and included the deployment of multiple custom versions of the publicly-available TINYSHELL backdoor on Juniper routers.

01

attributed to

The group this is attributed to.

02

techniques used (26)

ATT&CK techniques this enables or maps to.

03

software used (2)

Malware and tools associated with this.

04

source

Where this definition is published.