When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.

Both involve injecting a malicious backdoor into the gadget while the victims set up the software.

“Therefore, we believe that anyone using the IPany VPN might have been a valid target.”

Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol

When the malicious IPanyVPNsetup.exe installer is executed, it creates several directories and deploys both legitimate and malicious files.

you might read the full technical analyses inthe ESET blog post here.

Experts contacted the VPN software developer to inform them of the compromise.

The company then removed the malicious installer from its website.

Graph showing the deployment of both legitimate files and malicious SlowStepper backdoor

When the malicious IPanyVPNsetup.exe installer is executed, it creates several directories and deploys both legitimate and malicious files.

I recommend being extra careful when downloading new software from the web.