Trojan virus found in fake NordVPN website

August 22, 2019

On August 19, 2019 Dr.WEB announced their discovery that hackers cloned NordVPN's website which offered an app download infected with a virus.

Here are the screenshots Dr.WEB provided. Notice the URLs in the address bars.

Real NordVPN Site
Real NordVPN Site

The fake site encourages you to download a file containing the Win32.Bolik.2 virus. NordVPN's CyberSec feature helps by blocking malicious sites like this which is another reason we like NordVPN so much.

Fake NordVPN Site
Fake NordVPN Site