SopraVPN: Malicious WireGuard-Based VPN Client
SopraVPN is a trojanized VPN client distributed by UAC-0145 via SourceForge. It is compiled from WireGuard source code with modifications that allow…
Tag: WireGuard
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Deploy Malicious VPN Client
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed a new social engineering campaign attributed to UAC-0145, a subgroup of the…
WireGuard: VPN Protocol Exploited in Malware Campaign
WireGuard is a modern VPN protocol known for its simplicity and performance. In the UAC-0145 campaign, attackers compiled a trojanized version of…
New Avalon Malware Framework Packs CrownX Ransomware Capabilities
Cybersecurity researchers at Blackpoint Cyber have uncovered a previously undocumented modular malware framework codenamed Avalon, which is distributed via a multi-stage phishing…