IBM recently discovered a sophisticated man-in-the-browser (MitB) enterprise attack that targets virtual private network (VPN) users at a major international airport hub. Using the Citadel Trojan, criminals are targeting employees to steal their credentials for accessing internal airport applications. IBM has notified airport officials and the relevant government agencies of this attack. Once an attacker steals a victims VPN credentials, they can log in as the authorized user and have unfettered access to the information and resources associated with the account.”]
Source: https://securityintelligence.com/man-browser-citadel-trojan-targets-airport-employees-vpn-attack/