QuickFox VPN supply chain attack delivers FDMTP malware

Attackers compromised the QuickFox VPN distribution channel, inserting a malicious payload that installs the FDMTP backdoor on Windows systems. The trojanized app was linked to the threat actor Twill Typhoon and remained undetected for an extended period before being uncovered by FortiGuard Labs. Affected users are advised to remove the compromised version and update to a clean build.