Multiple malware used in attacks exploiting Ivanti VPN flaws

Mandiant spotted new malware used by a China-linked threat actor UNC5221 targeting Ivanti Connect Secure VPN and Policy Secure devices. Mandiant researchers discovered new malware employed by a China-linked APT group known as UNC5221 and other threat groups targeting Ivanti Connect Secure VPN and Policy Secure devices. The attackers were observed exploiting CVE-2023-46805 and CVE-2024-21887 […]

actor apt apt group attackers attacks china china-linked apt connect devices exploiting flaws hacking information security news it information security ivanti ivanti connect secure ivanti connect secure (ics) vpn ivanti connect secure vpn ivanti vpn malware mandiant pierluigi paganini policy researchers secure devices secure vpn targeting threat threat actor threat groups vpn