HelloNet campaign — new malicious modules launched through the ViPNet update system

A previously unknown Chinese-speaking APT group is actively targeting Russian organizations by exploiting the ViPNet update system to deploy sophisticated malware modules for persistence, reconnaissance, proxying, and file manipulation, evading detection through DLL sideloading and process injection techniques.