1 article
Storm-2561 Distributes Fake VPN Clients to Steal Credentials
Threat group Storm-2561 uses fake Ivanti, Cisco, and Fortinet VPN installers to harvest enterprise credentials through SEO poisoning attacks.