SonicWall NetExtender Trojanized to Steal VPN Credentials in Remote Attacks
TL;DR
SonicWall warns of a trojanized version of its NetExtender VPN client distributed via spoofed websites, designed to steal VPN credentials and configuration data, with detection tools now able to block the malicious installers. Users are advised to download software only from official sources and scan files before installation.
- SonicWall warns of trojanized NetExtender stealing VPN logins BleepingComputer
- SonicWall NetExtender Trojan and ConnectWise Exploits Used in Remote Access Attacks The Hacker News
- Threat Actor Trojanizes Copy of SonicWall NetExtender VPN App Dark Reading
- Trojanized SonicWall NetExtender app exfiltrates VPN credentials Help Net Security
- Beware of fake SonicWall VPN app that steals users' credentials theregister.com
Want the full story? Read the original reporting
Read on BleepingComputer