Mandiant, a cybersecurity vendor, has today disclosed new findings from its ongoing investigation into the pervasive exploitation of an Ivanti zero-day vulnerability. Its research reveals that the threat actor, identified as UNC5325, is employing a mix of 'living-off-the-land' (LotL) techniques to thwart detection, as well as launching innovative malware in an attempt to remain entrenched in Ivanti devices, despite system reboots, upgrades, and patches.