Chinese Hackers Exploiting VPN Flaws to Deploy KrustyLoader Malware

A pair of recently disclosed zero-day flaws in Ivanti Connect Secure (ICS) virtual private network (VPN) devices have been exploited to deliver a Rust-based payload called KrustyLoader that's used to drop the open-source Sliver adversary simulation tool.
The security vulnerabilities, tracked as CVE-2023-46805 (CVSS score: 8.2) and CVE-2024-21887 (CVSS score: 9.1), could be abused

adversary adversary simulation called chinese chinese hackers connect cve cve-2023-46805 cve-2024-21887 cvss cvss score deploy devices exploited exploiting flaws hackers ics ivanti ivanti connect secure malware network payload private private network rust score security simulation sliver tool virtual virtual private network vpn vulnerabilities zero-day zero-day flaws