Hackers caught hijacking this Chinese Windows VPN's installers to spread malware
- Fortinet experts found malicious code in QuickFox VPN's Windows installer
- The attack actively avoided personal gaming computers
- QuickFox has since removed the malicious components from version 3.59.6
Cybersecurity researchers have uncovered a severe supply chain attack targeting QuickFox, a popular Chinese Windows VPN application.
According to a new report from Fortinet’s FortiGuard Labs, attackers trojanized the software's installers for over a year to quietly deploy malicious backdoor implants onto users' machines.
As Fortinet's experts explain, QuickFox "is a VPN proxy and game accelerator typically employed by Chinese users to speed up access to Chinese-based resources, often to improve video game user experience."
However, experts found that malicious actors altered the application's underlying code to deliver a highly targeted malware campaign. The threat actors modified an HTML file within the app's installer to automatically download and execute malicious JavaScript.
To avoid raising suspicion, this malicious code was pulled...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
