[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fp6Ex1nzMWzQo1dx0ac553BekkRqt2M1ibxZWDsmtLHk":3},{"article":4,"iocs":36,"watch_terms":40},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":10,"entities":15,"category_id":16,"category":17,"article_tags":20},"f51de5b4-d599-4b2f-a63a-8521656dfd4c","Fake enterprise VPN sites used to steal company credentials","fake-enterprise-vpn-sites-used-to-steal-company-credentials","A threat actor tracked as Storm-2561 is distributing fake enterprise VPN clients from Ivanti, Cisco, and Fortinet to steal VPN credentials from unsuspecting users. [...]","Threat actor Storm-2561 is distributing fake enterprise VPN clients impersonating Ivanti, Cisco, and Fortinet to harvest VPN credentials from users. This credential theft campaign leverages fake VPN applications to deceive employees into compromising their authentication credentials, enabling unauthorized access to corporate networks.",null,"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ffake-enterprise-vpn-downloads-used-to-steal-company-credentials\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F11\u002F05\u002FCredit-card-hacker.jpg","2026-03-13T13:23:28+00:00","2026-03-14T09:41:11.089298+00:00",[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":16,"icon":10,"name":18,"slug":19},"Malware","malware",[21,26,31],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":32},{"id":33,"icon":10,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37],{"type":19,"value":38,"context":39},"Storm-2561","Threat actor distributing fake VPN clients for credential theft",[]]