{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/storm-2561-weaponizes-seo-poisoning-to-deploy-trojanized-vpn-clients-and-steal-enterprise-credentials/",
    "fang": "live",
    "exported_at": "2026-07-15T22:57:28Z",
    "total": 51,
    "categories": 4
  },
  "iocs": {
    "IPv4": [
      "194.76.226.93"
    ],
    "Domains": [
      "checkpoint-vpn.com",
      "cisco-secure-client.es",
      "forticlient-for-mac.com",
      "forticlient-vpn.de",
      "forticlient-vpn.fr",
      "forticlient-vpn.it",
      "forticlient.ca",
      "forticlient.co",
      "forticlient.co.uk",
      "forticlient.no",
      "fortinet-vpn.com",
      "ivanti-pulsesecure.com",
      "ivanti-secure-access.de",
      "ivanti-vpn.org",
      "myconnection.pro",
      "pn-connection.pro",
      "sonicwall-netextender.nl",
      "sophos-connect.org",
      "vpn-fortinet.com",
      "watchguard-vpn.com"
    ],
    "URLs": [
      "checkpoint-vpn.com",
      "cisco-secure-client.es",
      "co.uk",
      "forticlient-for-mac.com",
      "forticlient-vpn.de",
      "forticlient-vpn.fr",
      "forticlient-vpn.it",
      "forticlient.ca",
      "forticlient.no",
      "fortinet-vpn.com",
      "ivanti-pulsesecure.com",
      "ivanti-secure-access.de",
      "ivanti-vpn.org",
      "myconnection.pro",
      "pn-connection.pro",
      "sonicwall-netextender.nl",
      "sophos-connect.org",
      "vpn-fortinet.com",
      "watchguard-vpn.com"
    ],
    "sha256": [
      "26db3fd959f12a61d19d102c1a0fb5ee7ae3661fa2b301135cdb686298989179",
      "44906752f500b61d436411a121cab8d88edf614e1140a2d01474bd587a8d7ba8",
      "57a50a1c04254df3db638e75a64d5dd3b0d6a460829192277e252dc0c157a62f",
      "6129d717e4e3a6fb4681463e421a5603b640bc6173fb7ba45a41a881c79415ca",
      "6c9ab17a4aff2cdf408815ec120718f19f1a31c13fc5889167065d448a40dfe6",
      "85c4837e3337165d24c6690ca63a3274dfaaa03b2ddaca7f1d18b3b169c6aac1",
      "862f004679d3b142d9d2c729e78df716aeeda0c7a87a11324742a5a8eda9b557",
      "8ebe082a4b52ad737f7ed33ccc61024c9f020fd085c7985e9c90dc2008a15adc",
      "98f21b8fa426fc79aa82e28669faac9a9c7fce9b49d75bbec7b60167e21963c9",
      "cfa4781ebfa5a8d68b233efb723dbde434ca70b2f76ff28127ecf13753bfe011",
      "eb8b81277c80eeb3c094d0a168533b07366e759a8671af8bfbe12d8bc87650c9"
    ]
  }
}