KR-CERT warned that attackers were abusing Wizvera’s Veraport integrated security installer to distribute malware through phishing sites impersonating financial-transaction or corporate services. The advisory says the attack attempted to install malware disguised as security software by using configuration files and unauthorized certificates, affecting Veraport versions 3.8.5.0 and below. Users were advised to remove vulnerable installations and reinstall/update Veraport from legitimate financial or enterprise sites after vendors deployed security patches.