Home / Mar 17, 2026 / Story
0
#6 SecurityWeek general March 16, 2026 at 12:28 UTC

Threat Actor Targeting VPN Users in New Credential Theft Campaign

By Ionut Arghire

AI Summary

The Storm-2561 threat actor is distributing fake VPN clients through SEO poisoning techniques, deploying trojans to steal login credentials from users seeking VPN services. The campaign targets users searching for legitimate VPN solutions, compromising their authentication data through malicious software disguised as security tools.

Relevance score: 74.0/100

# More from March 17