Chinese-linked hackers (via ESET Research) have reportedly compromised South Korean VPN provider IPany in a calculated supply chain attack that exposed numerous users to malware. The attackers infiltrated IPany’s software development pipeline, injecting malicious code into the NSIS installer for its Windows-based VPN application.
This sophisticated operation enabled the distribution of a custom backdoor, known as "SlowStepper," to unsuspecting users. It is another high-profile example of supply chain vulnerabilities being exploited for cyber espionage.
.jpg?w=600)
