Storm-2561 Uses SEO Poisoning to Distribute Fake VPN Clients for Credential Theft

Executive Summary In a sophisticated campaign targeting enterprise environments, the threat actor Storm-2561 has resumed operations by leveraging Search Engine Optimization (SEO) poisoning to distribu