Approximately 2000 Citrix NetScalers backdoored in mass-exploitation campaign

Fox-IT (part of NCC Group) has uncovered a large-scale exploitation campaign of Citrix NetScalers in a joint effort with the Dutch Institute of Vulnerability Disclosure (DIVD). An adversary appears to have exploited CVE-2023-3519 in an automated fashion, placing webshells on vulnerable NetScalers to gain persistent access. The adversary can execute arbitrary commands with this webshell, […]

access adversary automated campaign citrix cve cve-2023-3519 detection and threat hunting disclosure divd dutch exploitation exploited fashion fox fox-it large ncc ncc group persistent scale uncovered vulnerability vulnerability disclosure vulnerable webshells