New NachoVPN Attack Uses Rogue VPN Servers to Install Malicious Updates

AmberWolf researchers found that threat actors can trick users into connecting their SonicWall NetExtender and Palo Alto Networks GlobalProtect VPN clients to attacker-controlled VPN servers using malicious sites or social engineering attacks.