Cisco Talos recently discovered seven additional third-stage VPNFilter modules that add significant functionality to the malware. The new functions include data filtering and multiple encrypted tunneling capabilities to mask command and control (C2) and data exfiltration traffic. The sophistication of VPNFilter drives home the point that this is a framework that all individuals and organizations should be tracking. Only an advanced and organized defense can combat these kinds of threats, and at the scale that VPNFilter is at, we cannot afford to overlook these new discoveries.”]
Source: https://blog.talosintelligence.com/2018/09/vpnfilter-part-3.html