ThreatVectr

Threat Intelligence

Illustration: a plain conference lanyard and a paper event poster on a dark wooden table
Threat Intelligence

Taiwan researchers hit by AI-polished phishing emails that steal Google logins in real time

Cisco Talos says the group it calls UAT-11985 used fake conference invites, poisoned QR codes and a live credential-stealing proxy to get around multi-factor logins.

4 min read
Illustration: a dimly lit government building corridor at night in a Central Asian architectural
Threat Intelligence

Hackers tied to Kazakhstan used a WinRAR flaw to spy on CIS governments

Cisco Talos and Recorded Future say the group they call UAT-6275 ran a 14-month campaign against government, water and energy targets, and left its own tools exposed on the open internet.

4 min read
Illustration: A dimly lit home office at night, a work laptop open on a desk showing a locked screen
Threat Intelligence

Hackers Are Going After Executives' Families to Get Past Corporate Security

Criminals are bypassing hardened corporate defences by targeting the people executives live with. Family members rarely have security training, and that gap is getting easier to exploit.

4 min read
Illustration: A dark, empty corporate boardroom at night
Threat Intelligence

A Ransomware Negotiator Was Supposed to Be on Your Side. Now He's Charged With Extortion.

Edward Dubrovsky, a well-known incident-response executive, faces federal charges that may tie him to ShinyHunters, the group that broke into an FBI jobs site last month.

4 min read
Illustration: an anonymous desk in a dim room: a stack of unmarked prepaid envelopes
Threat Intelligence

Ukrainian-Russian national pleads guilty to running 15,000-strong US money mule network

Oleg Korniev admitted leading Your Mule Cashout, a laundering ring that moved at least $10 million stolen from 750-plus US bank accounts over nearly two decades.

4 min read
Illustration: a dimly lit federal office corridor at night
Threat Intelligence

FBI Arrests Second Suspect Linked to ShinyHunters Hack of Its Own Jobs Portal

The extortion crew claims it stole data on nearly every FBI agent and applicant. A second arrest suggests investigators are working their way up the chain.

3 min read
Illustration: a dimly lit server room with blue rack lights, one open cabinet showing a yellow caution tag
Threat Intelligence

US seizes Chinese scanning tools used to break into critical networks

The Justice Department and FBI pulled the plug on Microscan and FishHub, two tools prosecutors say a Chinese government contractor used to hunt for weak spots in US infrastructure.

4 min read
Illustration: a dim server room aisle in a government data centre
Threat Intelligence

Ten governments name a Shanghai contractor as the engine behind China's data-theft campaigns

A joint advisory led by CISA and the FBI pins years of intrusions on Integrity Technology Group and lists eight old, unpatched flaws the operators keep riding into critical infrastructure.

4 min read
Illustration: a dim airline operations room at dusk, rows of empty flight-planning monitors glowing faintly blue
Threat Intelligence

A teenage hacker, a Boeing spin-off, and the Oracle flaw tying them together

Jordanian authorities have detained the alleged leader of ShinyHunters as the group tried to extort a former Boeing aviation unit, using a critical Oracle PeopleSoft bug now on CISA's must-patch list.

3 min read
Illustration: a cluster of small consumer networking devices, routers and cameras with blinking LED lights
Threat Intelligence

ClingSTUN: The Linux Backdoor Hiding in Your Router's Traffic

A newly tracked malware strain is quietly turning home routers, security cameras, and smart-office hardware into a criminal relay network, and it uses the internet's own plumbing to avoid detection.

4 min read
Illustration: a dimly lit interrogation room with an empty metal chair under a hanging ceiling lamp
Threat Intelligence

Jordan Detains Alleged ShinyHunters Member 'Rey' in FBI-Linked Operation

A suspect tied to the prolific extortion crew is reportedly cooperating with U.S. investigators after a September arrest.

3 min read
Illustration: a dim office desk at night, a laptop open showing a blurred generic blue corporate login form
Threat Intelligence

China-linked hackers posed as Anthropic staff to phish U.S. AI policy experts

A group tracked as TA419 ran fake-login pages that could capture passwords and the one-time codes meant to stop them.

4 min read
Illustration: a dim government office at night in an East Asian capital
Threat Intelligence

China-Linked Spies Hide Inside Outlook and OneDrive to Steal Asian Government Secrets

A newly documented backdoor called Antino is sitting on at least 16 government networks across eight Asian countries, and it talks to its handlers through legitimate Microsoft 365 traffic.

3 min read
Illustration: the interior of a server rack inside a dimly lit data centre
Threat Intelligence

Hackers Built Malware That Perfectly Mimics Korean and Taiwanese Email Security Boxes

Rapid7 has documented a set of Linux implants so well-tailored to their target appliances that they impersonate specific product files, ports, and processes used in real telecom environments across South Korea and Taiwan.

5 min read
Illustration: a generic laptop screen at night showing a plain calendar meeting invitation with a paperclip attachment icon
Threat Intelligence

Fake Meeting Invites Are Now Delivering Real Remote-Control Software

Microsoft says attackers are skipping the malware and installing legitimate MSP360 and ScreenConnect on victim machines, giving themselves a hands-on-keyboard foothold that looks like normal IT admin work.

4 min read
© 2026 Threat Vectr