Ivanti Connect Secure targeting campaign (Campaign)
ID: 8055c0a3-029b-55ac-aa95-c1baea4bae0f
STIX ID: report--8055c0a3-029b-55ac-aa95-c1baea4bae0f
Feed Name: Wiz Cloud Threat Landscape
Date Published: 2024-01-10
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
Collection of public write-ups and advisories documenting exploitation of Ivanti Connect Secure and Ivanti Policy Secure zero-day vulnerabilities (notably CVE-2023-46805 and CVE-2024-21887), reporting of active in-the-wild attacks and suspected APT targeting, discovery of web shell variants and a Rust-based loader (KrustyLoader), and consequent mitigation actions including CISA taking systems offline.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
