logo

Ivanti Connect Secure targeting campaign (Campaign)

ID: 8055c0a3-029b-55ac-aa95-c1baea4bae0f

STIX ID: report--8055c0a3-029b-55ac-aa95-c1baea4bae0f

Feed Name: Wiz Cloud Threat Landscape

Threat Score
90/100

Date Published: 2024-01-10

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

Collection of public write-ups and advisories documenting exploitation of Ivanti Connect Secure and Ivanti Policy Secure zero-day vulnerabilities (notably CVE-2023-46805 and CVE-2024-21887), reporting of active in-the-wild attacks and suspected APT targeting, discovery of web shell variants and a Rust-based loader (KrustyLoader), and consequent mitigation actions including CISA taking systems offline.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.