X-Force uncovers global NetScaler Gateway credential harvesting campaign

This post was made possible through the contributions of Bastien Lardy and Ruben Castillo. In September of 2023, X-Force uncovered a campaign where attackers were exploiting the vulnerability identified in CVE-2023-3519 to attack unpatched NetScaler Gateways to insert a malicious script into the HTML content of the authentication web page to capture user credentials. The […]

The post X-Force uncovers global NetScaler Gateway credential harvesting campaign appeared first on Security Intelligence.

attack attackers authentication campaign capture credential credential harvesting cve cve-2023-3519 data protection defensive security exploiting gateway global html identity and access management (iam) incident response malicious netscaler netscaler gateway page password-protection script security services september threat hunting threat management uncovered unpatched vulnerability web x-force