#vpn-malware

Storm-2561 Distributes Fake VPN Clients to Steal Credentials

Threat group Storm-2561 uses fake Ivanti, Cisco, and Fortinet VPN installers to harvest enterprise credentials through SEO poisoning attacks.