Fake enterprise VPN sites used to steal company credentials
BleepingComputer [Unofficial]
March 13, 2026
A threat actor tracked as Storm-2561 is distributing fake enterprise VPN clients from Ivanti, Cisco, and Fortinet to steal VPN credentials from unsuspecting users. [...]
Discussion in the ATmosphere