Fortinet, Ivanti, Sophos and Pulse Secure: Storm-2561 Uses SEO Poisoning, Fake Signed VPN Apps to Steal Enterprise Credentials
public
–
3 min read
Storm-2561 Exploits SEO Poisoning and Fake VPN Installers in Credential Theft Campaign
Since May 2025, the financially motivated threat actor…