SonicWall warns of fake VPN apps stealing user logins and putting businesses at risk - here's what we know

• SonicWall is warning hackers are distributing malicious VPN software
• NetExtender is being modified and distributed through fake websites
• The malicious software steals credentials and VPN configurations

Hackers have been spotted spoofing the SonicWall NetExtender SSL VPN client and distributing it through bogus webpages which mimic the official SonicWall site.

SonicWall and Microsoft Threat Intelligence (MSTIC) spotted the trojanized application and issued an advisory to warn users against downloading the fake software.

As NetExtender is used as a remote access VPN client, stolen VPN configuration data and VPN credentials can put both employees and businesses at risk of compromise.