#unc3886 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #unc3886, aggregated by home.social.
-
Tracking ORBs on Singapore's Telecommunications Networks
#UNC3886
https://www.team-cymru.com/post/tracking-orbs-on-singapores-telecommunications-networks -
Tracking ORBs on Singapore's Telecommunications Networks
#UNC3886
https://www.team-cymru.com/post/tracking-orbs-on-singapores-telecommunications-networks -
Tracking ORBs on Singapore's Telecommunications Networks
#UNC3886
https://www.team-cymru.com/post/tracking-orbs-on-singapores-telecommunications-networks -
Tracking ORBs on Singapore's Telecommunications Networks
#UNC3886
https://www.team-cymru.com/post/tracking-orbs-on-singapores-telecommunications-networks -
Tracking ORBs on Singapore's Telecommunications Networks
#UNC3886
https://www.team-cymru.com/post/tracking-orbs-on-singapores-telecommunications-networks -
Beyond the Battlefield: Threats to the Defense Industrial Base
#UNC3886 #UNC5221 #APT44 #TEMP.Vermin #UNC5125 #UNC5792 #UNC4221 #UNC5976 #UNC5114 #APT45 #APT43 #UNC2970 #UNC1549 #UNC6446 #APT5 #HeavenOfTheSlavs #APT1 #APT40 #VoltTyphoon #UNC6508 #UNC5203 #UNC5318
https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base -
Beyond the Battlefield: Threats to the Defense Industrial Base
#UNC3886 #UNC5221 #APT44 #TEMP.Vermin #UNC5125 #UNC5792 #UNC4221 #UNC5976 #UNC5114 #APT45 #APT43 #UNC2970 #UNC1549 #UNC6446 #APT5 #HeavenOfTheSlavs #APT1 #APT40 #VoltTyphoon #UNC6508 #UNC5203 #UNC5318
https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base -
Beyond the Battlefield: Threats to the Defense Industrial Base
#UNC3886 #UNC5221 #APT44 #TEMP.Vermin #UNC5125 #UNC5792 #UNC4221 #UNC5976 #UNC5114 #APT45 #APT43 #UNC2970 #UNC1549 #UNC6446 #APT5 #HeavenOfTheSlavs #APT1 #APT40 #VoltTyphoon #UNC6508 #UNC5203 #UNC5318
https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base -
Beyond the Battlefield: Threats to the Defense Industrial Base
#UNC3886 #UNC5221 #APT44 #TEMP.Vermin #UNC5125 #UNC5792 #UNC4221 #UNC5976 #UNC5114 #APT45 #APT43 #UNC2970 #UNC1549 #UNC6446 #APT5 #HeavenOfTheSlavs #APT1 #APT40 #VoltTyphoon #UNC6508 #UNC5203 #UNC5318
https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base -
Beyond the Battlefield: Threats to the Defense Industrial Base
#UNC3886 #UNC5221 #APT44 #TEMP.Vermin #UNC5125 #UNC5792 #UNC4221 #UNC5976 #UNC5114 #APT45 #APT43 #UNC2970 #UNC1549 #UNC6446 #APT5 #HeavenOfTheSlavs #APT1 #APT40 #VoltTyphoon #UNC6508 #UNC5203 #UNC5318
https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base -
UNC3886 leveraged ORB infrastructure for stealthy telecom targeting.
Per Cyber Security Agency of Singapore:
• Zero-day firewall compromise
• Rootkit persistence mechanisms
• GOBRAT & TINYSHELL C2 nodes
• ORB-tagged IP clustering in Singapore ASNs
• NetFlow-confirmed router-to-ORB communications
• Pre-positioned reconnaissanceAttribution aligned with assessments from Mandiant linking activity to China-sponsored espionage.
ORB networks blur the line between botnets and residential proxy ecosystems, increasing attribution friction and collateral risk.
Defensive priorities:
• Threat intel enrichment
• Edge device patch enforcement
• ASN anomaly detection
• Zero-trust segmentation
• IoT telemetry visibilityHow mature are ORB detection capabilities in your SOC?
Engage below.
Source: https://cyberpress.org/orb-networks-masks-attacks/
Follow @technadu for advanced threat analysis.
#ThreatIntel #UNC3886 #ORBNetworks #IoTSecurity #ZeroDay #C2Infrastructure #NetFlow #TelecomSecurity #BlueTeam #ThreatHunting #APTActivity #CyberOperations #Infosec
-
UNC3886 leveraged ORB infrastructure for stealthy telecom targeting.
Per Cyber Security Agency of Singapore:
• Zero-day firewall compromise
• Rootkit persistence mechanisms
• GOBRAT & TINYSHELL C2 nodes
• ORB-tagged IP clustering in Singapore ASNs
• NetFlow-confirmed router-to-ORB communications
• Pre-positioned reconnaissanceAttribution aligned with assessments from Mandiant linking activity to China-sponsored espionage.
ORB networks blur the line between botnets and residential proxy ecosystems, increasing attribution friction and collateral risk.
Defensive priorities:
• Threat intel enrichment
• Edge device patch enforcement
• ASN anomaly detection
• Zero-trust segmentation
• IoT telemetry visibilityHow mature are ORB detection capabilities in your SOC?
Engage below.
Source: https://cyberpress.org/orb-networks-masks-attacks/
Follow @technadu for advanced threat analysis.
#ThreatIntel #UNC3886 #ORBNetworks #IoTSecurity #ZeroDay #C2Infrastructure #NetFlow #TelecomSecurity #BlueTeam #ThreatHunting #APTActivity #CyberOperations #Infosec
-
UNC3886 leveraged ORB infrastructure for stealthy telecom targeting.
Per Cyber Security Agency of Singapore:
• Zero-day firewall compromise
• Rootkit persistence mechanisms
• GOBRAT & TINYSHELL C2 nodes
• ORB-tagged IP clustering in Singapore ASNs
• NetFlow-confirmed router-to-ORB communications
• Pre-positioned reconnaissanceAttribution aligned with assessments from Mandiant linking activity to China-sponsored espionage.
ORB networks blur the line between botnets and residential proxy ecosystems, increasing attribution friction and collateral risk.
Defensive priorities:
• Threat intel enrichment
• Edge device patch enforcement
• ASN anomaly detection
• Zero-trust segmentation
• IoT telemetry visibilityHow mature are ORB detection capabilities in your SOC?
Engage below.
Source: https://cyberpress.org/orb-networks-masks-attacks/
Follow @technadu for advanced threat analysis.
#ThreatIntel #UNC3886 #ORBNetworks #IoTSecurity #ZeroDay #C2Infrastructure #NetFlow #TelecomSecurity #BlueTeam #ThreatHunting #APTActivity #CyberOperations #Infosec
-
UNC3886 leveraged ORB infrastructure for stealthy telecom targeting.
Per Cyber Security Agency of Singapore:
• Zero-day firewall compromise
• Rootkit persistence mechanisms
• GOBRAT & TINYSHELL C2 nodes
• ORB-tagged IP clustering in Singapore ASNs
• NetFlow-confirmed router-to-ORB communications
• Pre-positioned reconnaissanceAttribution aligned with assessments from Mandiant linking activity to China-sponsored espionage.
ORB networks blur the line between botnets and residential proxy ecosystems, increasing attribution friction and collateral risk.
Defensive priorities:
• Threat intel enrichment
• Edge device patch enforcement
• ASN anomaly detection
• Zero-trust segmentation
• IoT telemetry visibilityHow mature are ORB detection capabilities in your SOC?
Engage below.
Source: https://cyberpress.org/orb-networks-masks-attacks/
Follow @technadu for advanced threat analysis.
#ThreatIntel #UNC3886 #ORBNetworks #IoTSecurity #ZeroDay #C2Infrastructure #NetFlow #TelecomSecurity #BlueTeam #ThreatHunting #APTActivity #CyberOperations #Infosec
-
UNC3886 leveraged ORB infrastructure for stealthy telecom targeting.
Per Cyber Security Agency of Singapore:
• Zero-day firewall compromise
• Rootkit persistence mechanisms
• GOBRAT & TINYSHELL C2 nodes
• ORB-tagged IP clustering in Singapore ASNs
• NetFlow-confirmed router-to-ORB communications
• Pre-positioned reconnaissanceAttribution aligned with assessments from Mandiant linking activity to China-sponsored espionage.
ORB networks blur the line between botnets and residential proxy ecosystems, increasing attribution friction and collateral risk.
Defensive priorities:
• Threat intel enrichment
• Edge device patch enforcement
• ASN anomaly detection
• Zero-trust segmentation
• IoT telemetry visibilityHow mature are ORB detection capabilities in your SOC?
Engage below.
Source: https://cyberpress.org/orb-networks-masks-attacks/
Follow @technadu for advanced threat analysis.
#ThreatIntel #UNC3886 #ORBNetworks #IoTSecurity #ZeroDay #C2Infrastructure #NetFlow #TelecomSecurity #BlueTeam #ThreatHunting #APTActivity #CyberOperations #Infosec
-
Singapurs #Cybersecurity-Behörde erhebt schwere Vorwürfe: Die #China-#Hacker--Gruppe #UNC3886 soll alle vier großen #Mobilfunk-Netze des Stadtstaats kompromittiert haben - über Monate hinweg. https://winfuture.de/news,156746.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
-
Singapurs #Cybersecurity-Behörde erhebt schwere Vorwürfe: Die #China-#Hacker--Gruppe #UNC3886 soll alle vier großen #Mobilfunk-Netze des Stadtstaats kompromittiert haben - über Monate hinweg. https://winfuture.de/news,156746.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
-
Singapurs #Cybersecurity-Behörde erhebt schwere Vorwürfe: Die #China-#Hacker--Gruppe #UNC3886 soll alle vier großen #Mobilfunk-Netze des Stadtstaats kompromittiert haben - über Monate hinweg. https://winfuture.de/news,156746.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
-
Singapurs #Cybersecurity-Behörde erhebt schwere Vorwürfe: Die #China-#Hacker--Gruppe #UNC3886 soll alle vier großen #Mobilfunk-Netze des Stadtstaats kompromittiert haben - über Monate hinweg. https://winfuture.de/news,156746.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
-
Singapurs #Cybersecurity-Behörde erhebt schwere Vorwürfe: Die #China-#Hacker--Gruppe #UNC3886 soll alle vier großen #Mobilfunk-Netze des Stadtstaats kompromittiert haben - über Monate hinweg. https://winfuture.de/news,156746.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
-
Revisiting UNC3886 Tactics to Defend Against Present Risk
#UNC3886 #Reptile #MedusaRootkit #MopSled
https://www.trendmicro.com/en_us/research/25/g/revisiting-unc3886-tactics-to-defend-against-present-risk.html -
Revisiting UNC3886 Tactics to Defend Against Present Risk
#UNC3886 #Reptile #MedusaRootkit #MopSled
https://www.trendmicro.com/en_us/research/25/g/revisiting-unc3886-tactics-to-defend-against-present-risk.html -
Revisiting UNC3886 Tactics to Defend Against Present Risk
#UNC3886 #Reptile #MedusaRootkit #MopSled
https://www.trendmicro.com/en_us/research/25/g/revisiting-unc3886-tactics-to-defend-against-present-risk.html -
Revisiting UNC3886 Tactics to Defend Against Present Risk
#UNC3886 #Reptile #MedusaRootkit #MopSled
https://www.trendmicro.com/en_us/research/25/g/revisiting-unc3886-tactics-to-defend-against-present-risk.html -
Revisiting UNC3886 Tactics to Defend Against Present Risk
#UNC3886 #Reptile #MedusaRootkit #MopSled
https://www.trendmicro.com/en_us/research/25/g/revisiting-unc3886-tactics-to-defend-against-present-risk.html -
Why did #Singapore name #cyberthreat group #UNC3886 & is it linked to #China?
"Shanmugam said: “As far as 🇸🇬 #government is concerned, we can say we r confident tt it's tis particular org'zn. Who they r linked to, & how they operate, is not something I want to go into.”.. te govt thought #Singaporeans ought to know where te #attack was coming from.. given Singapore’s relations w #US, other Western powers & #Taiwan, PRC wld hv interest in exercis'g deterrence & to sabotage"
https://www.scmp.com/week-asia/politics/article/3319055/why-did-singapore-name-cyberthreat-group-unc3886-and-it-linked-china?module=perpetual_scroll_0&pgtype=article -
Why did #Singapore name #cyberthreat group #UNC3886 & is it linked to #China?
"Shanmugam said: “As far as 🇸🇬 #government is concerned, we can say we r confident tt it's tis particular org'zn. Who they r linked to, & how they operate, is not something I want to go into.”.. te govt thought #Singaporeans ought to know where te #attack was coming from.. given Singapore’s relations w #US, other Western powers & #Taiwan, PRC wld hv interest in exercis'g deterrence & to sabotage"
https://www.scmp.com/week-asia/politics/article/3319055/why-did-singapore-name-cyberthreat-group-unc3886-and-it-linked-china?module=perpetual_scroll_0&pgtype=article -
Why did #Singapore name #cyberthreat group #UNC3886 & is it linked to #China?
"Shanmugam said: “As far as 🇸🇬 #government is concerned, we can say we r confident tt it's tis particular org'zn. Who they r linked to, & how they operate, is not something I want to go into.”.. te govt thought #Singaporeans ought to know where te #attack was coming from.. given Singapore’s relations w #US, other Western powers & #Taiwan, PRC wld hv interest in exercis'g deterrence & to sabotage"
https://www.scmp.com/week-asia/politics/article/3319055/why-did-singapore-name-cyberthreat-group-unc3886-and-it-linked-china?module=perpetual_scroll_0&pgtype=article -
Why did #Singapore name #cyberthreat group #UNC3886 & is it linked to #China?
"Shanmugam said: “As far as 🇸🇬 #government is concerned, we can say we r confident tt it's tis particular org'zn. Who they r linked to, & how they operate, is not something I want to go into.”.. te govt thought #Singaporeans ought to know where te #attack was coming from.. given Singapore’s relations w #US, other Western powers & #Taiwan, PRC wld hv interest in exercis'g deterrence & to sabotage"
https://www.scmp.com/week-asia/politics/article/3319055/why-did-singapore-name-cyberthreat-group-unc3886-and-it-linked-china?module=perpetual_scroll_0&pgtype=article -
Singapore warns China-linked group UNC3886 targets its critical infrastructure – Source: securityaffairs.com https://ciso2ciso.com/singapore-warns-china-linked-group-unc3886-targets-its-critical-infrastructure-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #criticalinfrastructure #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Uncategorized #hackingnews #Singapore #hacking #UNC3886 #China
-
Singapore warns China-linked group UNC3886 targets its critical infrastructure – Source: securityaffairs.com https://ciso2ciso.com/singapore-warns-china-linked-group-unc3886-targets-its-critical-infrastructure-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #criticalinfrastructure #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Uncategorized #hackingnews #Singapore #hacking #UNC3886 #China
-
Singapore warns China-linked group UNC3886 targets its critical infrastructure – Source: securityaffairs.com https://ciso2ciso.com/singapore-warns-china-linked-group-unc3886-targets-its-critical-infrastructure-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #criticalinfrastructure #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Uncategorized #hackingnews #Singapore #hacking #UNC3886 #China
-
Singapore warns China-linked group UNC3886 targets its critical infrastructure – Source: securityaffairs.com https://ciso2ciso.com/singapore-warns-china-linked-group-unc3886-targets-its-critical-infrastructure-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #criticalinfrastructure #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Uncategorized #hackingnews #Singapore #hacking #UNC3886 #China
-
‘UNC3886 is Attacking Our Critical Infrastructure Right Now’: Singapore’s National Security Lawmaker https://thecyberexpress.com/unc3886-critical-infrastructure-singapore/ #SingaporeCriticalInfrastructure #criticalinfrastructure #nationalsecurity #FirewallDaily #ThreatActors #CyberNews #Singapore #UNC3886
-
‘UNC3886 is Attacking Our Critical Infrastructure Right Now’: Singapore’s National Security Lawmaker https://thecyberexpress.com/unc3886-critical-infrastructure-singapore/ #SingaporeCriticalInfrastructure #criticalinfrastructure #nationalsecurity #FirewallDaily #ThreatActors #CyberNews #Singapore #UNC3886
-
‘UNC3886 is Attacking Our Critical Infrastructure Right Now’: Singapore’s National Security Lawmaker https://thecyberexpress.com/unc3886-critical-infrastructure-singapore/ #SingaporeCriticalInfrastructure #criticalinfrastructure #nationalsecurity #FirewallDaily #ThreatActors #CyberNews #Singapore #UNC3886
-
‘UNC3886 is Attacking Our Critical Infrastructure Right Now’: Singapore’s National Security Lawmaker https://thecyberexpress.com/unc3886-critical-infrastructure-singapore/ #SingaporeCriticalInfrastructure #criticalinfrastructure #nationalsecurity #FirewallDaily #ThreatActors #CyberNews #Singapore #UNC3886
-
#China Cyber Espionage Group #UNC3886 Backdoored #Juniper Routers
UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected.
#JuniperMX routers running outdated hardware and software, using EOL configurations, were easier targets due to #vulnerabilities in their security systems. The #malware leveraged Junos OS’s Veriexec, a file integrity monitor, to avoid detection.
https://hackread.com/chinese-group-unc3886-backdoor-juniper-routers/ -
#China Cyber Espionage Group #UNC3886 Backdoored #Juniper Routers
UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected.
#JuniperMX routers running outdated hardware and software, using EOL configurations, were easier targets due to #vulnerabilities in their security systems. The #malware leveraged Junos OS’s Veriexec, a file integrity monitor, to avoid detection.
https://hackread.com/chinese-group-unc3886-backdoor-juniper-routers/ -
#China Cyber Espionage Group #UNC3886 Backdoored #Juniper Routers
UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected.
#JuniperMX routers running outdated hardware and software, using EOL configurations, were easier targets due to #vulnerabilities in their security systems. The #malware leveraged Junos OS’s Veriexec, a file integrity monitor, to avoid detection.
https://hackread.com/chinese-group-unc3886-backdoor-juniper-routers/ -
#China Cyber Espionage Group #UNC3886 Backdoored #Juniper Routers
UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected.
#JuniperMX routers running outdated hardware and software, using EOL configurations, were easier targets due to #vulnerabilities in their security systems. The #malware leveraged Junos OS’s Veriexec, a file integrity monitor, to avoid detection.
https://hackread.com/chinese-group-unc3886-backdoor-juniper-routers/ -
#China Cyber Espionage Group #UNC3886 Backdoored #Juniper Routers
UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected.
#JuniperMX routers running outdated hardware and software, using EOL configurations, were easier targets due to #vulnerabilities in their security systems. The #malware leveraged Junos OS’s Veriexec, a file integrity monitor, to avoid detection.
https://hackread.com/chinese-group-unc3886-backdoor-juniper-routers/ -
Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers
#UNC3886 #CVE_2025_21590
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers -
Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers
#UNC3886 #CVE_2025_21590
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers -
Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers
#UNC3886 #CVE_2025_21590
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers