Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft

Pulse ID: 69bb25b2d5040ffc15b51076
Pulse Link: https://otx.alienvault.com/pulse/69bb25b2d5040ffc15b51076
Pulse Author: Tr1sa111
Created: 2026-03-18 22:22:42

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #SEOPoisoning #VPN #bot #Tr1sa111

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

LevelBlue Open Threat Exchange