VPNs encrypt your traffic, but they aren't blind to your activity. Here's the metadata your provider can see—and how to spot services that misuse it.
The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations.