Untitled attachment

Notices where this attachment appears

1. Embed this notice
   The Shadowserver Foundation (shadowserver@infosec.exchange)'s status on Friday, 19-Jan-2024 20:03:27 JST The Shadowserver Foundation

   in reply to

   In collaboration with @volexity we have added daily scans & reports of compromised Ivanti Connect Secure VPN instances. Data shared in our Compromised Website report, tagged "ivanti-connect-secure".

   609 IPs found on 2023-01-16: https://shadowserver.org/what-we-do/network-reporting/compromised-website-report/

   https://dashboard.shadowserver.org/statistics/combined/tree/?day=2024-01-16&source=compromised_website&tag=ivanti-connect-secure%2B&geo=all&data_set=count&scale=log

   Background: https://www.volexity.com/blog/2024/01/15/ivanti-connect-secure-vpn-exploitation-goes-global/