vpn

Ukrainian Hackers Ramp Up Brute-Force and Password-Spraying Attacks on VPN and RDP Systems

In mid-2025, a coalition of Ukraine-based autonomous systems orchestrated unprecedented brute-force and password-spraying campaigns against exposed SSL VPN and Remote…

1 year ago

Chinese APT Leverages Proxy and VPN Services to Obfuscate Infrastructure

A significant data dump surfaced on DDoSecrets.com, purportedly extracted from a workstation belonging to a threat actor targeting organizations in…

1 year ago

Legitimate Chrome VPN with 100K+ Installs Secretly Captures Screenshots and Exfiltrates Sensitive Data

A Chrome extension marketed as FreeVPN.One, boasting over 100,000 installations, a verified badge, and featured placement in the Chrome Web…

1 year ago

New Research Reveals Security Vulnerabilities Linked to Popular VPN Apps

Researchers have uncovered deceptive practices among major VPN providers, linking seemingly independent entities into three distinct "families" with combined Google…

1 year ago

VexTrio TDS Deploys Malicious VPN Apps on Google Play and App Store

VexTrio, a sophisticated threat actor known for operating a massive traffic distribution system (TDS), has expanded its malicious activities by…

1 year ago

Dark Partners Hacker Group Drains Crypto Wallets Using Fake AI Tools and VPN Services

The financially driven organization known as Dark Partners has been planning massive cryptocurrency theft since at least May 2025, using…

1 year ago

Hackers Exploit Ivanti and Fortinet VPN Vulnerabilities in Attacks on Japanese Companies

Cyber espionage campaigns against Japanese companies have increased in fiscal year 2024, which runs from April 2024 to March 2025,…

1 year ago

SafePay Ransomware Uses RDP and VPN Access to Infiltrate Organizational Networks

SafePay ransomware has become one of the most active and destructive threat actors in Q1 2025, a shocking development in…

1 year ago

Hackers Exploit GitHub to Distribute Malware Disguised as VPN Software

CYFIRMA has discovered a sophisticated cyberattack campaign in which threat actors are using GitHub to host and disseminate malware masquerading…

1 year ago

Azure API Vulnerabilities Expose VPN Keys and Grant Over-Privileged Access via Built-In Roles

Token Security experts recently conducted a thorough investigation that exposed serious security weaknesses in Microsoft Azure's Role-Based Access Control (RBAC)…

1 year ago