Fake VPN download site steals administrator credentials to give attackers direct access to corporate networks — but delivers official signed software so victims never suspect a thing

A fake WatchGuard VPN download website stole administrator credentials before delivering the genuine signed installer, potentially exposing corporate networks without deploying malware.

Published 21-Oct-2026 01:12 UTC · First seen 21-Oct-2026 01:04 UTC

Sources

• Latest from TechRadar in Security · 18-Oct-2026