IPANY VPN BREACHED IN SUPPLY-CHAIN ATTACK TO PUSH CUSTOM MALWARE

Summary from the TLDR InfoSec newsletter

South Korean VPN provider IPany was breached in a supply-chain attack that deployed a custom SlowStepper malware. The attackers breached the IPany development environment and added their custom SlowStepper malware to the VPN installation. The SlowStepper C2 malware supports commands that gather system information, fetch and run files from the C2 server, enumerate and exfiltrate files, run Python-based spyware tools, run shell commands, execute syscalls, and delete files or directories.