Russian security firm Doctor Web uncovered a fake website for a VPN provider thats designed to spread a banking Trojan that can steal credentials to bank accounts. The fake NordVPN website has been visited by thousands of users over the past several weeks, the company says. The Trojan, called Win32.Bolik.2, is being spread by the same unknown hacker group. NordVPN is a widely used network security vendor for popular operating systems such as Microsoft Windows and Apple’s MacOS.”]
Source: https://www.cuinfosecurity.com/fake-vpn-website-delivers-banking-trojan-a-12940