HC3 TLP White: APT41 Citrix and Zoho Attacks on Healthcare, March 26, 2020

A recent campaign of cyberattacks from a foreign threat actor targeted healthcare organizations and specifically exploited Citrix and Zoho technologies used for remote desktop services among others. These attacks allow attackers the ability to conduct reconnaissance and execute code on the victim systems and access to corporate networks. Patches have been released for both vulnerabilities and should be implemented as soon as possible.