Threat Actors Exploit Private Network Software Vulnerabilities to Target Russian Government Agencies

A sophisticated threat group is exploiting flaws in the update mechanism of ViPNet private network product suite to conduct targeted campaigns against…

IT teams must immediately verify if they use ViPNet products and review the integrity of received updates. It is critical to implement cryptographic validation of update packages, segregate update distribution systems from the rest of the network, and maintain forensic monitoring on systems that received updates during the exposure period.