Frequency
2
occurrences
First Seen
March 13, 2026
Last Seen
May 19, 2026
Related Threat Clusters
-
Microsoft Disrupts Fox Tempest Malware-Signing Service for Ransomware Gangs
On May 19, 2026, Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) operation that provided over 1,000 fraudulent code-signing certificates to cybercriminals, enabling them to disguise malware as…
33 articles · Updated May 19, 2026 -
Storm-2561 Targets VPN Users with SEO Poisoning and Fake Clients
Cybercriminal group Storm-2561 is exploiting SEO poisoning to distribute trojanized VPN clients, primarily targeting enterprise users of popular VPN solutions like Pulse Secure, Ivanti, and Cisco. The attackers…
9 articles · Updated March 13, 2026
Recent Intelligence Reports
- Microsoft disrupts cybercrime service that abused software verification systems en masse — Cyberscoop · May 19, 2026
- Storm-2561 Uses SEO Poisoning, Fake Signed VPN Apps to Steal Enterprise Credentials — Gbhackers · March 13, 2026