Cheana Stealer Attacking Windows & macOS VPN Users

Cyble Research and Intelligence Lab has discovered a sophisticated phishing campaign mimicking WarpVPN to distribute custom-tailored malware for Windows, Linux, and macOS. Named “Cheana”, this multi-platform strategy uses brand impersonation and detailed instructions to win user trust and infiltrate systems. The campaign uses Telegram to distribute malware and the malware steals cryptocurrency data, saved browser passwords and other valuable information. It’s recommended to only download software from trusted sources, educate users on phishing risks, and maintain robust security measures.