Click, Call, Compromise: Inside the Latest Loader Campaigns

**Executive summary:** This Microsoft Threat Intelligence Podcast episode examines two active cybercrime campaigns—Storm 2561, which leverages SEO poisoning to deliver trojanized software (SilentRoute, Bumblebee) that steals VPN credentials and facilitates ransomware access, and Storm 1811, which deploys the ReadBed loader through persuasive social engineering (fake IT help desk interactions over Teams) to enable lateral movement and ransomware deployment—underscoring evolving attacker TTPs and the need for verification, strong controls, and user vigilance.