BridgeAgent

Reported Context (2)

including Medusa rootkit-related components, custom SSH backdoors, Zabbix-masquerading malware (aka BridgeAgent) that acts as a pathway for actor-controlled access into connected environments, and packet-triggered Weekly Cybersecurity Roundup: QTYF Disruption, AI-Agent Breach, ZBT Router Backdoors
The group also deployed a disguised backdoor called BridgeAgent, abused trusted infrastructure to reach high-value networks, and overlaps with the Chinese espionage group UNC3886. Fire Ant Uses Compromised Cisco Routers to Spy on High-Value Networks

CVE (5)

Malware (9)

People (3)

Threat Actors (5)

MITRE ATT&CK (17)

Vendors (9)

Products (11)

Tools (4)

Industries (3)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.