threat-intel
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
High
Summary
A long-standing supply chain attack targeting QuickFox, a VPN tool used by overseas Chinese users, has been ongoing since August 2025. The attack, attributed to tactical overlaps with the Chinese state-sponsored threat actor Mustang Panda, leverages a trojanized Windows installer to deliver FDMTP, a backdoor. The campaign utilizes DLL side-loading to deploy malware and collects extensive information about the victim's system to refine targeting, potentially focusing on Chinese citizens abroad or professionals interacting with native speakers.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data