SonicWall Warns of Trojanized NetExtender Stealing User Information

SonicWall has issued an alert on a campaign distributing a modified version of its NetExtender application to steal user information.

An SSL VPN application, NetExtender provides remote users with secure access to enterprise resources, offering file download and upload capabilities, network drive access, and more.

“In collaboration with Microsoft Threat Intelligence (MSTIC), SonicWall has identified a deceptive campaign to distribute a hacked and modified version of SonicWall’s SSL VPN NetExtender application that closely resembles the official SonicWall NetExtender software,” the company announced.

The trojanized version of the application was built using the latest NetExtender release (version 10.3.2.27) and is digitally signed with a certificate issued for Citylight Media Private Limited, SonicWall explains.

The malicious code in the modified application was designed to fetch information related to the user’s VPN configuration and send it to a remote server.

According to SonicWall, the threat actor modified two ...