importantSYS.SOURCE: The Hacker News• 2026-08-05T11:17:19+05:30

QuickFox Supply Chain Attack Exploits Trojanized Installer to Deploy FDMTP Backdoor

#supply_chain #backdoor #malware #windows_security #cyber_attack

Cybersecurity researchers uncovered a supply chain attack on QuickFox, a VPN tool, where a trojanized Windows installer delivered the FDMTP backdoor. The attack, linked to Mustang Panda, used JavaScript payloads and DLL side-loading to target Windows users, evading detection through domain spoofing.

Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users.

According to Fortinet FortiGuard Labs, the supply chain attack has been ongoing since at least August 2025 and involves a trojanized version of the application to deliver FDMTP, a

Read original article

*** END OF TRANSMISSION ***

> WISPR FLOW UNVEILS AI-POWERED MEETING NOTETAKER WITH GRANOLA-INSPIRED FEATURES > RUST PROJECT IMPLEMENTS LLM USAGE POLICY FOR CODE CONTRIBUTIONS > QUICKFOX SUPPLY CHAIN ATTACK EXPLOITS TROJANIZED INSTALLER TO DEPLOY FDMTP BACKDOOR > ZERO-TOKEN MEMORY OPERATIONS FOR LARGE LANGUAGE MODEL AGENTS > TRAINING A CHAR-LEVEL TRANSFORMER ON AN ESP32-S3 MICROCONTROLLER > COMPARATIVE ANALYSIS OF ZIGBEE AND MATTER OVER THREAD IN IOT NETWORK PERFORMANCE > REACTIVATION OF BUGTRAQ MAILING LIST FOR FULL DISCLOSURE IN CYBERSECURITY > FLOWISE AI PLATFORM TO CEASE OPERATIONS > DEBUNKING COMMON MISCONCEPTIONS IN SOFTWARE ENGINEERING AND GENERATIVE AI > WEBKIT DNS AND IP LEAK VULNERABILITIES IN PROXY BROWSERS AND ICLOUD PRIVATE RELAY> WISPR FLOW UNVEILS AI-POWERED MEETING NOTETAKER WITH GRANOLA-INSPIRED FEATURES > RUST PROJECT IMPLEMENTS LLM USAGE POLICY FOR CODE CONTRIBUTIONS > QUICKFOX SUPPLY CHAIN ATTACK EXPLOITS TROJANIZED INSTALLER TO DEPLOY FDMTP BACKDOOR > ZERO-TOKEN MEMORY OPERATIONS FOR LARGE LANGUAGE MODEL AGENTS > TRAINING A CHAR-LEVEL TRANSFORMER ON AN ESP32-S3 MICROCONTROLLER > COMPARATIVE ANALYSIS OF ZIGBEE AND MATTER OVER THREAD IN IOT NETWORK PERFORMANCE > REACTIVATION OF BUGTRAQ MAILING LIST FOR FULL DISCLOSURE IN CYBERSECURITY > FLOWISE AI PLATFORM TO CEASE OPERATIONS > DEBUNKING COMMON MISCONCEPTIONS IN SOFTWARE ENGINEERING AND GENERATIVE AI > WEBKIT DNS AND IP LEAK VULNERABILITIES IN PROXY BROWSERS AND ICLOUD PRIVATE RELAY