VPN, Ivanti and hackers
Ongoing attacks on Ivanti VPNs install a ton of sneaky, well-written malware
PHASEJAM is a well-written and multifaceted bash shell script. It first installs a web shell that gives the remote hackers privileged control of devices. It then injects a function into the Connect Secure update mechanism that’s intended to simulate the upgrading process.
Google: Chinese hackers likely behind Ivanti VPN zero-day attacks
Hackers exploiting the critical Ivanti Connect Secure zero-day vulnerability disclosed yesterday installed on compromised VPN appliances new malware called 'Dryhook' and 'Phasejam' that is not currently associated with any threat group.
Vulnerability revealed by Ivanti has been exploited by the same group that targeted Connect Secure from January 2024.
Ivanti issues urgent alert on a new vulnerability found in their Connect Secure product, urging immediate action to mitigate ...
Threat actors are once again lining up to exploit vulnerabilities in the widely used Ivanti product suite, with a link to Chinese espionage activity firmed up by Mandiant analysts.
Security researchers at Mandiant are confident that Chinese hackers are behind an ongoing malware campaign exploiting a flaw ...
Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.
Researchers at Google Cloud-owned Mandiant say that the exploitation of a critical Ivanti Connect Secure vulnerability began ...
Ivanti has warned customers of a critical vulnerability impacting its VPN appliances that is being actively exploited in the ...
The latest attacks come one year after a threat group exploited a pair of zero-days in the same Ivanti product.
Factory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results
Feedback