Hackers Exploiting Vulnerabilities in Ivanti Connect Secure to Deploy MetaRAT Malware

A China-based attack group has launched a targeted campaign against Japanese shipping and transportation companies by exploiting critical vulnerabilities in Ivanti Connect Secure (ICS). The campaign, uncovered in April 2025, leverages two severe vulnerabilities to gain initial access to target networks and deploy multiple PlugX malware variants, including the newly identified MetaRAT and Talisman PlugX. […]

The post Hackers Exploiting Vulnerabilities in Ivanti Connect Secure to Deploy MetaRAT Malware appeared first on Cyber Security News.