Major LockBit ransomware attacks facilitated by Citrix Bleed exploitation

Vulnerable Citrix NetScaler ADC and Gateway servers impacted by the Citrix Bleed flaw, tracked as CVE-2023-4966, were noted by threat researcher Kevin Beaumont to have been targeted by the LockBit ransomware gang to facilitate its recent string of high-profile intrusions against Industrial & Commercial Bank of China's U.S. subsidiary ICBC Financial Services, major aerospace firm Boeing, port operator DP World Australia, and law firm Allen & Overy, reports BleepingComputer.

adc amp attacks bank china citrix citrix bleed citrix netscaler citrix netscaler adc commercial cve cve-2023-4966 exploitation financial flaw gang gateway high icbc industrial kevin kevin beaumont lockbit lockbit ransomware major netscaler netscaler adc noted profile ransomware ransomware attacks ransomware gang researcher servers threat vulnerable