Chinese Hackers Weaponize Korean VPN Software to Deploy Stealthy ‘SlowStepper’ Malware

A Chinese hacking group "PlushDaemon" executed a supply chain attack on South Korean VPN provider IPany, compromising their VPN installer between November 2023 and May 2024. The attack deployed a sophisticated malware called 'SlowStepper,' affecting multiple organizations and enabling exte...