CyberzSOC

Malware Analysis Report 2026-02-26 This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service referenced in this bulletin or otherwise. The Cybersecurity and Infrastructure Security Agency (CISA) updated this MAR on Feb. 26, 2026, to provide deeper technical insight into RESURGE to provide network defenders with enhanced understanding and tools to identify, mitigate, and respond to RESURGE. CISA’s updated analysis shows that RESURGE can remain latent on systems until a remote actor attempts to connect to the compromised device. Because of this, CISA assesses that RESURGE may be dormant and undetected to identify RESURGE samples and to implement the actions in CISA Mitigation Instructions for CVE-2025-0282 and Alert CISA Releases Malware Analysis Report on RESURGE Malware Associated with Ivanti Connect Secure.