13-10-2026
Clean Install, Stolen Creds: Fake WatchGuard VPN Site Serves Genuine Signed Client
https://www.huntress.com/blog/fake-watchguard-vpn-credential-phishing
Report completeness: Medium
Threats:
Seo_poisoning_technique
Credential_harvesting_technique
Victims:
Managed service providers, Watchguard vpn users
Geo:
Netherlands
TTPs:
Tactics: 1
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1036, T1041, T1056, T1056.003, T1078, T1133, T1204.001, T1574.002, T1583.001, T1608.006, have more...
IOCs:
Domain: 4
Url: 3
File: 2
IP: 3
Hash: 0
Email: 0
BrowserExtension: 0
Soft:
SonicWall, Microsoft 365
Algorithms:
sha256
Languages:
javascript
