Attacks on Ivanti's ICS have been known since the beginning of January. CISA has analyzed the malware that attackers have installed.