NWHStealer Spreads Through Fake Proton VPN Sites and Tool Downloads
A malware campaign documented by Malwarebytes is using counterfeit Proton VPN websites, doctored utility downloads, gaming mods, and video-platform links to infect Windows users with an infostealer