APT5: Citrix ADC Threat Hunting Guidance
released on 2022-12-13 @ 04:05:00 PM
APT5 has demonstrated capabilities against Citrix Application Delivery Controller deployments (“Citrix ADCs”). Targeting Citrix ADCs can facilitate illegitimate access to targeted organizations by bypassing normal authentication controls. In collaboration with partners, NSA has developed a threat-hunting guide to help organizations to look for potential artifacts of this type of activity.