Kojima said.<\/p>\n
The DslogdRAT is a remote access trojan (RAT) that allows attackers to maintain control over infected systems, execute commands remotely, download further payloads, and exfiltrate sensitive data.<\/p>\n
According to researchers from JPCERT\/CC and Kaspersky, this newly discovered RAT executes after exploiting a zero-day vulnerability in Ivanti Connect Secure – also identified as CVE-2025-0282.<\/p>\n
The vulnerability allows attackers to bypass security mechanisms and gain unauthorized access to systems.<\/p>\n
The Ivanti Connect Secure is software widely used to provide secure remote access to corporate networks.<\/p>\n
Several global organizations and industries, including many in Japan, leverage this software, which shows the potential spread and impact of this vulnerability.<\/p>\n
CVE-2025-0282 refers to a zero-day vulnerability found in the Ivanti Connect Secure software.<\/p>\n
It enables remote code execution, allowing an attacker to execute arbitrary commands within the context of a privileged process.<\/p>\n
This vulnerability became particularly alarming because of its perfect 10\/10 CVSS score.<\/p>\n
Furthermore, due to this score and its significant usage, attackers targeting this flaw could have potentially huge impacts on government organizations, industrial infrastructures, and corporate networks.<\/p>\n
The investigation reveals that the attackers exploited the Ivanti Connect Secure vulnerabilities to plant a web shell, creating a backdoor that enables remote operations on the infected server.<\/p>\n
After the initial compromise, the attackers deployed DslogdRAT as a follow-up payload, giving them independent command and control of the targeted systems.<\/p>\n
Researchers have identified that multiple critical infrastructures, including several in Japan, have been hit using this malware deployment method.<\/p>\n
The sectors primarily targeted by these attacks include energy, transportation, and telecommunications.<\/p>\n
These escalating attacks raise severe concern for the nation’s cyber defense strategies.<\/p>\n
It’s crucial to patch the Ivanti ICS promptly to defend against the DslogdRAT malware and any other potential exploit against this vulnerability.<\/p>\n
Furthermore, enforcing strong password policies, monitoring network traffic, and implementing advanced threat detection tools can help protect against similar threats.<\/p>\n
For more detailed information on this topic, check out the following links:<\/p>\n
1. JPCERT\/CC’s official website<\/a> – contains research and updates on various cybersecurity threats Kojima said. Details About DslogdRAT Malware The DslogdRAT is a remote access trojan (RAT) that<\/p>\n","protected":false},"author":1,"featured_media":3153,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2,5],"tags":[],"class_list":["post-3152","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-news","pmpro-has-access"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3152","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/comments?post=3152"}],"version-history":[{"count":1,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3152\/revisions"}],"predecessor-version":[{"id":3382,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3152\/revisions\/3382"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media\/3153"}],"wp:attachment":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media?parent=3152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/categories?post=3152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/tags?post=3152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n2. Kaspersky’s official blog<\/a> – provides insights on the latest security threats and vulnerabilities
\n3. NIST’s official vulnerability database<\/a> – presents information about the Ivanti ICS vulnerability<\/p>\n","protected":false},"excerpt":{"rendered":"