Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells

SUMMARY Update September 6, 2023: This Cybersecurity Advisory has been updated with new tactics, techniques, and procedures (TTPs) as well as indicators of compromise (IOCs) received from an additional victim and trusted third parties. Update End The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this Cybersecurity Advisory to warn network defenders about exploitation of

Related Keywords

,Sysinternals Adexplorer ,Domain Trust Discovery ,Operations Center ,Infrastructure Security Agency ,Server Software Component ,National Institute Of Standards ,System Network Configuration Discovery ,Microsoft ,Network Service Discovery ,Cybersecurity Advisory ,Application Delivery Controller ,Active Directory ,Additional Observed Activity ,Netscaler Gateway ,Known Exploited Vulnerabilities Catalog ,Secure Shell ,Linkable Format ,Cyber Threat Actors ,Scripting Interpreter ,Logon Autostart ,Software Component ,Elevation Control Mechanism ,Decode Files ,Directory Permissions Modification ,Mac File ,Directory Permissions ,Clear Linux ,Mac System ,Match Legitimate Name ,Masquerade File ,Groups Discovery ,Network Configuration Discovery ,Internet Connection ,Collected Data ,Local Data ,Third Party Provided ,Citrix Gateway Security Bulletin ,Sector Cybersecurity Performance Goals ,National Institute ,Detection Methods ,