In May 2024, we noticed detections of malicious code in an NSIS installer for Windows that users from South Korea had downloaded from the website of the legitimate VPN software IPany (https ...

ESET researchers have discovered a supply-chain attack against a VPN provider in South Korea by a newly discovered and ...

In a sophisticated cyberespionage operation, the Chinese hacking group PlushDemon has compromised the website of South Korean ...

PlushDaemon APT targets South Korean VPN with SlowStepper backdoor. Multistage DNS C&C protocol aids espionage.

ESET researchers uncovered a supply chain attack on a South Korean VPN by the China-aligned APT group PlushDaemon ...

The APT group has been active since at least 2019 and has previously targeted updates on Chinese applications. The APT was ...

In May 2024, ESET’s antivirus software flagged malware infections on Windows computers that were traced to the website of South Korean VPN company IPany. "Upon further analysis, we discovered ...

Any user who downloaded the installer from IPany, a VPN provider in South Korea, may be at risk, according to antivirus ...

A China-linked cyberespionage group has reportedly exploited a legitimate VPN service to spread malware and spy on victims' activities. The ESET security research team found the malicious code – ...

South Korean VPN provider IPany was breached in a supply chain attack by the "PlushDaemon" China-aligned hacking group, who ...