A fake WatchGuard VPN download website stole administrator credentials before delivering the genuine signed installer, potentially exposing corporate networks without deploying malware.