Active Malware Campaign - Citrix NetScaler ADC / Gateway

I’m aware some of our customers are using Citrix, so wanted to give a notice on an active campaign exploiting a recently-disclosed vulnerability in Citrix NetScaler ADC and Citrix Gateway centered on CVE-2023-3519

This appears to be focused on Citrix Appliances, and I’m not certain whether any customers are using such appliances or whether the BigFix Client can be installed on them. I don’t expect BigFix will supply out-of-box content for detection or remediation.

If you have any such configurations and are willing to run some test relevances on them for detection, please reply here or send me a private message.