Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials
- Posted on March 13, 2026
- By The Hacker News
- 9 Views
Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials
Storm-2561 spreads fake VPN installers via SEO poisoning and GitHub downloads, stealing enterprise VPN credentials with Hyrax malware.
