PlushDaemon APT targets South Korean VPN with SlowStepper backdoor. Multistage DNS C&C protocol aids espionage.

South Korean VPN provider IPany was breached in a supply chain attack by the "PlushDaemon" China-aligned hacking group, who compromised the company's VPN installer to deploy the custom 'SlowStepper' ...

Any user who downloaded the installer from IPany, a VPN provider in South Korea, may be at risk, according to antivirus ...

PlushDaemon APT hacked South Korean VPN software with SlowStepper backdoor as part of a 2023 espionage campaign ...

A China-linked cyberespionage group has reportedly exploited a legitimate VPN service to spread malware and spy on victims' ...

This week, researchers spied Palo Alto firewall flaws, a North Korean IT worker conspiracy, ChatGPT as DDoS vector. Chinese hackers targeted a VPN maker, a fake ...

The APT group has been active since at least 2019 and has previously targeted updates on Chinese applications. The APT was ...