Hackers have deployed a fake version of the SonicWall NetExtender SSL VPN app to steal user credentials for corporate networks.
The trojanized app, known as SilentRoute, tricks users into exposing their data, allowing attackers to gain unauthorized access and steal sensitive information.
The malicious version of NetExtender bypasses digital certificate checks and sends stolen VPN credentials to a remote server.
SonicWall and Microsoft have taken down the fake sites hosting the trojanized app and users are advised to download software only from official sources.