A cyberthreat actor has created a web site that promotes a fake VPN program that installs the Vidar and CryptBot password-stealing trojans. These Trojan attacks will then attempt to steal saved browser credentials and other information from a victim’s computer. Users should make sure the site they are visiting is the legitimate URL for an associated service or application. To protect themselves, users should ensure that the sites they visit are the legitimate URLs for associated services or applications that users should be using.
Source: https://www.bleepingcomputer.com/news/security/fake-vpn-site-pushes-cryptbot-and-vidar-info-stealing-trojans/