Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

At least two different suspected China-linked cyber espionage clusters, tracked as UNC5325 and UNC3886, have been attributed to the exploitation of security flaws in Ivanti Connect Secure VPN appliances.
UNC5325 abused CVE-2024-21893 to deliver a wide range of new malware called LITTLELAMB.WOOLTEA, PITSTOP, PITDOG, PITJET, and PITHOOK, as well as attempted to maintain

called china chinese chinese hackers clusters connect connect secure cve cve-2024-21893 cyber cyber espionage deploy espionage exploitation exploiting flaws hackers ivanti ivanti connect secure ivanti connect secure vpn ivanti vpn malware secure vpn security security flaws unc3886 vpn