Fake VPN download site steals administrator credentials to give attackers direct access to corporate networks — but delivers official signed software so victims never suspect a thing
A fake WatchGuard VPN site is stealing your passwords
Via TechRadar
Fake WatchGuard VPN website steals administrator credentials while delivering legitimate software
Attackers collected VPN server addresses, usernames, and passwords
The fraudulent website rejected initial submissions to collect credentials a second time
A fraudulent WatchGuard download website stole VPN login details while supplying the authentic installation package, experts have claimed.
Security investigators at Huntress traced the activity to a lookalike domain that collected connection details before downloading the legitimate client.
The investigation began after suspicious activity involving an administrator working for…
Courtesy
This story was originally published by TechRadar. All rights belong to the original publisher.
Read the original on techradar.com ↗