APT41 Using New Speculoos Backdoor to Target Organizations Globally

The campaign exploits CVE-2019-19781 affecting Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliances that allows attackers to remotely execute arbitrary commands.