← Back to Feed
MAR-25993211-r1.v2 Ivanti Connect Secure (RESURGE)
March 28, 2025 · CISA Advisories · Severity: MEDIUM
CISA published malware analysis report MAR-25993211-r1.v2 analyzing RESURGE malware targeting Ivanti Connect Secure appliances. The malware enables persistent backdoor access and data exfiltration through compromised VPN gateways. Ivanti users should patch immediately and investigate for signs of compromise.
Key Takeaways
- CISA MAR-25993211-r1.v2 analyzes the RESURGE malware targeting Ivanti Connect Secure VPN appliances.
- RESURGE provides persistent backdoor access to compromised Ivanti appliances enabling data theft and lateral movement.
- Organizations using Ivanti Connect Secure should apply patches and scan for indicators of RESURGE compromise.