A threat actor tracked as Storm-2561 is distributing fake enterprise VPN clients from Ivanti, Cisco, and Fortinet to steal VPN credentials from unsuspecting users. [...]
Fake enterprise VPN sites used to steal company credentials
Summary + source link. No paywalls, no tracking.