#6
SecurityWeek
general
March 16, 2026 at 12:28 UTC
Threat Actor Targeting VPN Users in New Credential Theft Campaign
By Ionut Arghire
AI Summary
The Storm-2561 threat actor is distributing fake VPN clients through SEO poisoning techniques, deploying trojans to steal login credentials from users seeking VPN services. The campaign targets users searching for legitimate VPN solutions, compromising their authentication data through malicious software disguised as security tools.
Relevance score: 74.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →