Post by Cybersecurity and Infrastructure Security Agency

🔍 We updated our Malware Analysis Report on RESURGE—a sophisticated malware implant targeting Ivanti Connect Secure devices. RESURGE can remain dormant and undetected until a remote actor connects, posing an ongoing threat. The updates include advanced techniques such as: TLS Fingerprinting & Authentication Fake TLS Certificate Functionality Advanced Encryption And More 🛡️ Review the updated MAR for advanced TTPs and mitigation strategies 👉 https://go.dhs.gov/iHg