Microsoft warns Storm-2561 uses fake VPN downloads in search results to steal enterprise credentials
VPN Central [Unofficial]
March 16, 2026
Storm-2561 is using poisoned search results and fake VPN downloads to steal enterprise credentials, according to Microsoft. The campaign pushes users searching for trusted VPN software toward spoofed sites and malicious ZIP files that install signed trojans disguised as legitimate VPN clients. Microsoft says the goal is simple: capture saved VPN credentials and connection data […]
The post Microsoft warns Storm-2561 uses fake VPN downloads in search results to steal enterprise credentials appeared first on VPN Central.
Discussion in the ATmosphere