Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA, Steal Cloud Data and Encrypt Networks
A joint U.S. and South Korean government advisory has warned that the Gunra ransomware operation is exploiting vulnerable Fortinet VPN appliances, weak remote-access controls,...
Fake Chinese VPN Drops GoodPersonRAT With Keylogging, Proxying, and Telegram Theft
The legitimate VPN service is highly popular for its ability to bypass China's Great Firewall. However, attackers are exploiting its reputation to deploy hidden...
Russian Hackers Exploit RDP and VPNs to Breach Target Networks
Russian state-sponsored and criminal hacking groups are increasingly abusing exposed Remote Desktop Protocol (RDP) services and vulnerable VPN gateways to quietly break into target...
DPRK Cyber Spies Infiltrate Global Companies via Fake Job Scams, Sidestepping U.S. Sanctions
Cybersecurity researcher ZachXBT ignited this probe by tying the domain luckyguyssite to crypto payments linked to North Korean (DPRK) fake IT workers.
During 30...
SEO Poisoning Campaign Uses Signed Trojans To Harvest VPN Credentials
In mid-January 2026, Microsoft Defender Experts uncovered a credential theft operation orchestrated by the financially motivated threat actor Storm-2561.
Active since May 2025, this...