Security News Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials TheHackerNews Daniel Bender 13 Mar 2026 Storm-2561 spreads fake VPN installers via SEO poisoning and GitHub downloads, stealing enterprise VPN credentials with Hyrax malware.
