Chinese threat actor UNC5174 is targeting Linux systems using SNOWLIGHT malware and a remote access trojan (RAT) called VShell, utilising open-source tools to reduce costs and complicate attribution. The group, which targets sectors across Europe, Asia, and the U.S, is extending its tactics to use fileless payloads for long-term access, with operations indicating the exploitation of known vulnerabilities in multiple vendors.

IPVanish’s malware protection confirmed among the best on the market
IPVanish’s malware and tracker blocking technology is among the best in the market, according to independent auditors. VIPRE Advanced Security, the service fuelling IPVanish, received