As cited
Copy frozen at (site build).
threat intel
Clean Install, Stolen Creds: Fake WatchGuard VPN Site Serves Genuine Signed Client
A fraudulent WatchGuard download site captures SSL virtual private network (VPN) credentials before delivering the legitimate signed client software. The attack exploits user trust in official-looking distribution channels to intercept authentication details while still providing functioning software that masks the compromise.
Why it matters: Organizations and remote workers using WatchGuard VPN must verify download sources to avoid credential theft; verify legitimate downloads directly from WatchGuard's official domain and watch for authentication anomalies post-installation.
- Source published
- First seen by Cybersecurity Tracker