TechBleepingComputerabout 16 hours ago
Hackers abuse ViPNet to target Russian agencies
1 min read
A campaign called HelloNet abuses ViPNet's update mechanism to target Russian government agencies. Attackers place a malicious DLL, HelloInjector, in the ViPNet Update System directory for sideloading. The payload deploys HelloProxy, HelloExecutor, HelloCleaner, and HelloBackdoor. Kaspersky attributes the campaign to an unidentified Chinese-speaking APT group with low confidence.
Level
Hype check
Tap to vote and see what everyone thinks.
