Tag: heur:trojan.win32.loader.gen

1 Attack Reports | 0 Vulnerabilities

Attack reports

Sophisticated backdoor mimicking secure networking software updates

A sophisticated backdoor targeting Russian organizations in government, finance, and industry sectors was discovered masquerading as updates for ViPNet secure networking software. The malware, distributed in LZH archives, exploits a path substitution technique to execute a malicious loader that dep…
backdoor
apt
russia
payload
c2 server
software updates
2025-04-22
targeted attack
secure networking
heur:trojan.win32.loader.gen
path substitution
vipnet
Published: April 22, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports