🚨 Chinese Hackers Breach U.S. Local Governments via Trimble Cityworks Zero-Day Exploit🚨 Contact for Security: [email protected]

https://wiretor.com/chinese-hackers-breach-u-s-governments-via-zero-day-exploit

#CityworksZeroDay #CVE20250994 #ChineseHackers #TrimbleExploit #UAT6382 #CobaltStrike #RustMalware #WebShells #AntSword #ChopperWebshell #MaLoader #CyberAttack2025 #IISVulnerability #CybersecurityNews #WireTorCyberSecurity #VulnerabilityManagement

Sophos X-Ops is currently tracking a campaign by threat actors targeting unpatched #Citrix #NetScaler systems exposed to the internet. Our data indicates strong similarity between #attacks using CVE-2023-3519 delivering #malware and #webshells and previous attacks using a number of the same #TTPs.

#Sophosxops #threatintel #cve20233519

#Citrix CVE-2023-3519 Exploitation of Citrix Zero-Day by Possible Espionage Actors - a fascinating write-up by
@Mandiant
who performed analysis of the compromised #Netscaler appliance and all the planted #webshells

https://www.mandiant.com/resources/blog/citrix-zero-day-espionage

"🚨Citrix NetScaler ADC and Gateway Devices Under Attack: CISA Urges Immediate Action🚨"

CISA warns of a critical security flaw in Citrix NetScaler ADC and Gateway devices being exploited to drop web shells on vulnerable systems. Immediate action is advised!🔒💻

Source: [The Hacker News](https://thehackernews.com/2023/07/citrix-netscaler-adc-and-gateway.html)

Tags: #CISA #Citrix #NetScaler #ADC #Gateway #Cybersecurity #Vulnerability #WebShells #InfoSec 🌐🔐🔍

🚨Ein Hinweis an alle #Hochschulen !

Ich habe alleine in den letzten zwei Wochen bei zwei Hochschulen #webshells gefunden. Das bedeutet, dass da schon #Hacker drin waren und #Backdoors hinterlassen haben.

⚠️ Scannt eure Webserver auf webshells!

Hinweis: Ich habe den ursprünglichen Beitrag gelöscht, da durch das Bild die Möglichkeit bestand, Rückschluss auf das betroffene System zu ziehen. Thx @richard

📢In a recent blog published by
@bmcder02 you can learn how to detect malicious IIS modules and prevent web exploitation and web shells. 🤩 #cybersecurity #infosec
#webshells

https://www.microsoft.com/en-us/security/blog/2022/12/12/iis-modules-the-evolution-of-web-shells-and-how-to-detect-them/

#ProxyLogon : quand une décision de justice américaine autorise le #FBI à supprimer les #WebShells incriminés, sans accord préalable des victimes !

https://blog.sosordi.net/2021/04/proxylogon-quand-une-decision-de-justice-americaine-autorise-le-fbi-a-supprimer-les-web-shells-incrimines-sans-accord-prealable-des-victimes.html

#securite #Microsoft #ExchangeServer