Feed›Malware›QuickFox VPN installers were trojanized with malware for a y...
MalwareCyber Insider
8.0 — CRITICAL

QuickFox VPN installers were trojanized with malware for a year

📅 5 August 2026 at 12:51 UTC📰 Cyber InsiderView original source ↗
QuickFox VPN installers were trojanized with malware for a year

QuickFox VPN installed a persistent backdoor on selected Windows computers, focusing on systems belonging to developers, administrators, translators, and cryptocurrency users. The attack was uncovered by Fortinet’s FortiGuard Incident Response Team while investigating modified QuickFox installers and related command-and-control infrastructure. Researchers traced the compromise to two malicious lines added to an HTML file loaded when … The post QuickFox VPN installers were trojanized with malware for a year appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

QuickFox VPN users were targeted with a trojanized installer that installed a persistent backdoor, FDMTP, on systems used by developers, administrators, translators, and cryptocurrency users for at least a year.

⚙️Technical Details
Affected Systems
Windows
Attack Vectors
Modified QuickFox installersJavaScript downloads from cdns3[.]51quickfox[.]cn
💥Impact Assessment
Severity: critical
Who Is at Risk
Developers, administrators, translators, and cryptocurrency users of QuickFox VPN
🛡️Recommended Actions
1Install the latest available version of QuickFox directly from the vendor
2Remove older installations
3Run a full endpoint security scan
📦Affected Products
QuickFox VPN

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed