Mandiant and GTIG detail active exploitation of a Citrix NetScaler zero-day, deploying custom web shells WHIPSHOT and SLAPSHOT for root access. Mandiant… Read more → The post WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign appeared first on IT Security News .