Hackers deploying the WikiLoader malware are shifting tactics, moving away from phishing and into SEO poisoning and VPN spoofing. This is according to a new report from cybersecurity researchers from Palo Alto Networks’ Unit 42, which said that the new tactics, observed a few months ago, are broadening the scope of possible victims.
In June this year, Unit 42 started tracking websites that claimed to offer GlobalProtect for download. GlobalProtect is Palo Alto Networks' VPN (Virtual Private Network) solution. It provides secure remote access for users who are outside the corporate network, ensuring that their connections to the network are secure and that their traffic is protected.
