---
title: "Discussion on \"Storm-2561 Weaponizes SEO to Push Malicious VPN Software\" | Hashnode"
description: "Discussion on \"Storm-2561 Weaponizes SEO to Push Malicious VPN Software\". Russian threat group Storm-2561 is using search engine optimization tricks to distribute fake VPN clients that steal credentials. Here's how they're doing it."
url: "https://hashnode.com/posts/storm-2561-weaponizes-seo-to-push-malicious-vpn-software/69b346bb82b5db5da98b93a7"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Storm-2561 Weaponizes SEO to Push Malicious VPN Software](https://redsheeptrends.hashnode.dev/storm-2561-weaponizes-seo-to-push-malicious-vpn-software?utm_source=hashnode&utm_medium=feed)

Russian threat group Storm-2561 is using search engine optimization tricks to distribute fake VPN clients that steal credentials. Here's how they're doing it.

Mar 12 · 4 min read · redsheeptrends.hashnode.dev  
Read the article

-   [#credential-theft](https://hashnode.com/tag/credential-theft)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#malware](https://hashnode.com/tag/malware)
-   [#seo](https://hashnode.com/tag/seo)
-   [#vpn](https://hashnode.com/tag/vpn)

## Written by

[Steven Stone](https://hashnode.com/@redsheep)

@redsheep · Hawaii, USA

  
[View profile](https://hashnode.com/@redsheep)

Sharing things that matter.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.