Cyberespionage group uses fake VPN software to steal user data

Hackers inject spyware into the popular OpenVPN Android App

Since at least 2017, a threat actor involved in cyberespionage has lured victims using fake VPN software on Android. This is a trojanized software version of legitimate software SoftVPN or OpenVPN.

Researchers claim that the campaign is \”highly targeted\”. It aims to steal contact and call information, device location as well as messages sent from multiple apps.