Storm-2561 targets enterprise VPN users with SEO poisoning, fake clients
The financially motivated group has been active since May 2025, impersonating Fortinet, Ivanti, Cisco, and other vendors to steal corporate credentials.
By Gyana Swain
Mar 13, 2026 4 mins
Cybercrime
Hacker Groups
Hacking