BleepingComputer • 20h
Supply Chain Compromise of ViPNet Secure Communication Software
Threat actors compromised the update mechanism of ViPNet secure communication software by injecting malicious code into trusted binaries. By leveraging compromised digital signatures, attackers bypassed perimeter defenses to target Russian government agencies and critical infrastructure. The operation utilized modified software updates to establish long-term persistence and facilitate lateral movement across defense, energy, and finance sectors. The campaign is characterized by the use of specialized post-exploitation toolsets and C2 infrastructure designed to maintain stealth within high-security, government-grade environments.