Hackers exploit ViPNet's update mechanism to attack Russian government bodies

Security researchers have observed a campaign in which attackers are abusing the software update mechanism of ViPNet — a product for building secure private networks.

According to available data, the attacks are the work of an advanced threat actor. The targets are Russian organizations, including government agencies.

ViPNet is widely used in Russia to build secure communication channels and virtual private networks, including in the public sector, which makes the abuse of its update infrastructure especially sensitive from a security standpoint.

Details about the specific methods used to compromise the update mechanism, the scale of the campaign and the roster of affected organizations have not yet been disclosed.

Source: Bleeping Computer