QuickFox Supply Chain Attack Used to Deploy FDMTP Implant

Reported 05 Aug 2026 by otx · Severity: medium

A long-running campaign compromised the QuickFox VPN application, primarily used by Chinese users to access Chinese resources and improve gaming experiences. Active since August 2025, the attack involved trojanized Windows installers (versions 3.0.51.0 through 3.59.5) that deploy