Frequency
2
occurrences
First Seen
March 13, 2026
Last Seen
March 13, 2026
Related Threat Clusters
-
Storm-2561 Targets VPN Users with SEO Poisoning and Fake Clients
Cybercriminal group Storm-2561 is exploiting SEO poisoning to distribute trojanized VPN clients, primarily targeting enterprise users of popular VPN solutions like Pulse Secure, Ivanti, and Cisco. The attackers…
9 articles · Updated March 13, 2026
Recent Intelligence Reports
- Fake enterprise VPN downloads used to steal company credentials — Bleepingcomputer · March 13, 2026
- Storm-2561 targets enterprise VPN users with SEO poisoning, fake clients — Csoonline · March 13, 2026