+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials (/showthread.php?tid=6322524)
Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials - Stanley - Mar 23, 2026
Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials
Microsoft has disclosed details of a credential theft campaign that employs fake virtual private network (VPN) clients distributed through search engine optimization (SEO) poisoning techniques.
"The campaign redirects users searching for legitimate enterprise software to malicious ZIP files on attacker-controlled websites to deploy digitally signed trojans that masquerade as trusted VPN clients
https://thehackernews.com/2026/03/storm-2561-spreads-trojan-vpn-clients.html