According to an article in Techspot, many visitors looking to download the popular NordVPN software, were duped by a cloned look-alike site. When prompted to download NordVPN's client, the real program was installed in order to evade suspicion, however, the Win32Bolik.2 trojan with key logging capabilities was also downloaded as the same time to the victim's device.
#keyloggers #keylogging # stealkeystrokes #IRS # taxes