VPNFilter - YetAnotherBotNet or is it more than that?! A different view into VPNFilter from the technical analysis of its modules to the possible motivations behind some design decisions.The massification of the Internet with the IoT, the Wi-Fi routers and media centers has changed the threat landscape. Since the Mirai botnet, launched in August 2016, we are seeing the exploitation of home equipment for illicit activities by the attackers. On the side the existence of groups sponsored by governments is not new and there are many examples of such groups, linked with like countries with Russia or North Korea by both private and public organizations.But until now a botnet with characteristics of a state sponsored group had never been seen. Actually, no official organization had ever attributed a large botnet to a state sponsored group. VPNFilter represents the first botnet based on home devices that has been attributed to a state sponsored group and really had characteristics of a state sponsored group. It has infected over 500,000 router in more than 50 countries, it is highly adaptive and modular all the necessary features of a perfect attack platform. In this talk I will do a technical walk though the modules, and explain the possible motivation behind some of the design decisions. VPNFilter represents a change in the way we look at the security of organizations, while some modules try to attack organizations directly, there are others that are used for attacks lateral. No is only a network the worms, you have been developed with the intention of using the end user as an attack platform, that makes the attribution extremely hard. Also, as its target are the home routers it has total access to the traffic for the Internet. This allows a lateral movement for the computers of the internal network, with a reduced effort. Throughout the presentation I will talk about the geopolitical context and how that has influenced the decisions of its creators. VPNFilter has to be framed at the moment we are living in the cyber security landscape.