Threat Actor
Storm 2561
- First Reported
- Mar 18, 2026
- Latest Reported
- Mar 18, 2026
Reported Context (1)
- Microsoft attributes a campaign using SEO poisoning and fake VPN installers to steal credentials to Storm 2561. Fake VPN Installers Steal Credentials as Router Proxy Botnet Is Disrupted
Malware (1)
Threat Actors (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.