The newly discovered threat group compromises companies and then moves laterally on the network, exfiltrating data, logging keystrokes and more along the way.
Researchers recently examined more than 400 malware families and found that 25 percent of them abused legitimate internet services as part of their attack infrastructure.
The White House advisory group acknowledged that water providers face various cybersecurity workforce and budgetary issues.
Mandiant researchers said that a “limited number” of previously impacted victims remain at risk.
Adversaries are targeting flaws in Juniper's EX and SRX series devices that can be chained together to gain remote code execution.