AstrillVPN: VPN Service Used by Suspected DPRK Operatives
AstrillVPN is a VPN service whose exit nodes were identified in the investigation as part of the infrastructure used by suspected DPRK…
AstrillVPN is a VPN service whose exit nodes were identified in the investigation as part of the infrastructure used by suspected DPRK…
North Korean IT workers are increasingly infiltrating government agencies and businesses by applying for remote jobs, passing interviews, and obtaining legitimate credentials.…
Cisco Secure Firewall ASA (Adaptive Security Appliance) Software is a core network security product providing firewall, VPN, and threat defense capabilities. It…
SopraVPN is a trojanized VPN client distributed by UAC-0145 via SourceForge. It is compiled from WireGuard source code with modifications that allow…
AstrillVPN is a virtual private network service that has been observed as a fixture in North Korean cyber operations. In the undercover…
IKE VPN endpoints were targeted by threat actors using CVE-2026-33824.
QuickFox is a VPN and network acceleration tool for overseas Chinese users. Its Windows installer was trojanized in a supply chain attack,…
QuickFox VPN is a virtual private network and network acceleration tool designed for overseas Chinese users. It was the target of a…
Mullvad is a VPN service whose exit nodes were identified by Huntress as being used in the N-central attacks. The IP addresses…
VPN component of Fortinet's FortiOS operating system, affected by CVE-2025-68686 information disclosure vulnerability.