[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-trojan-x-vpn-installer-spreads-credentialstealing-rat":10},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":24,"persona_id":22,"persona_name":22,"section":22,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},564,"trojan-x-vpn-installer-spreads-credentialstealing-rat","Trojan X-VPN installer spreads credential‑stealing RAT","A forged X-VPN download was used to deliver the STX RAT trojan, though the legitimate app remains untouched.","A fake X-VPN installer is being used to drop the STX RAT malware.\n\nResearchers observed that attackers host a tampered installer on third‑party sites. When users download the file, the trojan runs silently and harvests saved credentials. The genuine X‑VPN client was not compromised; only the counterfeit binaries are dangerous.\n\nThe episode matters because VPN users often trust any installer that carries the brand name. Credential‑stealing malware can give attackers access to corporate accounts, banking logins, and personal data. Security teams will need to tighten download vetting and educate users on official sources.\n\nIn short, the VPN itself is fine – the problem is the download runway.","[\"vpn\",\"malware\",\"security\"]","2026-06-10T09:30:44.000Z","2026-06-10T10:31:54.896Z","2026-06-10T10:32:02.508Z","published",null,[],"https:\u002F\u002Fcdn.xyz.onl\u002Farticle-images\u002Ftrojan-x-vpn-installer-spreads-credentialstealing-rat.webp",[26,27,28],"vpn","malware","security",[30],{"name":31,"url":32},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fvpn\u002Fvpn-privacy-security\u002Ffake-x-vpn-installers-found-to-spread-credential-stealing-malware-heres-how-to-stay-safe",0]