RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a new malware called RESURGE, which exploits a now-patched security flaw in Ivanti Connect Secure appliances. RESURGE, an improvement over the SPAWNCHIMERA malware variant, contains rootkit, dropper, backdoor, bootkit, proxy, and tunneler capabilities. Organizations are advised to patch their Ivanti instances and implement additional security measures to mitigate the risk posed by this malware.

*****
Written on