An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations,