"Almost 2,000 Citrix NetScaler Servers Backdoored in Hacking Campaign"

Nearly 2,000 Citrix NetScaler servers have been compromised in a massive campaign exploiting the critical Remote Code Execution (RCE) flaw, tracked as CVE-2023-3519. According to researchers, over 1,200 servers were backdoored before administrators installed the patch for the vulnerability, and they remain compromised because they have not been inspected for signs of successful exploitation. Researchers from the cybersecurity company Fox-IT (part of the NCC Group) and the Dutch Institute of Vulnerability Disclosure (DIVD) uncovered the large-scale campaign planting webshells on vulnerable Citrix NetScaler servers. This article continues to discuss the hacking campaign that has compromised almost 2,000 Citrix NetScaler servers.

Bleeping Computer reports "Almost 2,000 Citrix NetScaler Servers Backdoored in Hacking Campaign"