ThreatVectr

Threat Intelligence — Page 12

A large satellite dish installation site on rural New Zealand farmland, with warning tape cordoning off the equipment and surveyors' instruments scattered nearb
Threat Intelligence

New Zealand's Spy Agency Says It Blocked a Chinese Observatory From Installing Satellite-Tracking Equipment on NZ Soil

Purple Mountain Observatory, a Chinese government-linked research body, tried to set up ground-based space hardware in New Zealand through a local company that apparently had no idea the gear could gather intelligence useful to Beijing's military.

4 min read
Array of home networking routers stacked and arranged on shelves in a data center environment, their status lights blinking in an unsynchronized pattern suggest
Threat Intelligence

New Evooo1Bot malware is quietly turning home routers into criminal traffic relays

Researchers say the Mirai-based botnet has been hijacking gateway devices since July to sell as proxies, steal credentials, and launch attacks.

4 min read
Bank transaction records displayed on multiple screens in an investigation room, with highlighted suspicious transfer patterns and wire traces connecting to dif
Threat Intelligence

Seven arrested over €30M Commerzbank fraud that abused a service provider flaw

Investigators say the crew drained customer accounts by exploiting a weakness at a third-party firm that connects to the German bank.

3 min read
Federal agency office building exterior at dusk with security perimeter visible, simultaneous image inset showing Boeing 737 cockpit avionics systems and separa
Threat Intelligence

North Korean IT Worker Infiltrated a Federal Agency, Boeing 737 Security Flaws Explored, and Refrigeration Systems Found Vulnerable

A North Korean operative got hired at a US government agency, researchers found exploitable weaknesses in Boeing 737 onboard systems, and serious flaws turned up in industrial refrigeration controllers. Here's what each finding means in practice.

3 min read
Computer screen displaying a web browser with DecryptAds analysis tool overlay revealing hidden ad networks and data brokers operating in the background of popu
Threat Intelligence

A New Free Tool Lets You See Who's Actually Tracking You Online

DecryptAds pulls back the curtain on the ad partners and data brokers hiding inside popular websites and apps, including some based in Russia and China.

4 min read
Cybersecurity incident timeline chart on a large monitor showing the LiteLLM package compromise alongside the separate Trivy scanner vulnerability, with data da
Threat Intelligence

Most of the 2,500 organisations hit in the LiteLLM attack were actually victims of a different breach entirely

A closer look at the data shows the Trivy scanner compromise, not the LiteLLM package, caused almost all the damage, and stolen credentials are already on sale.

4 min read
A MacBook Pro on a desk with suspicious activity indicators on the screen, password manager notifications and browser tabs visible, representing credential thef
Threat Intelligence

AmnesiaStealer: New Mac Malware Quietly Drains Passwords and Browser Sessions

A newly identified piece of malicious software targeting Apple Mac computers can lift saved passwords, browser cookies, and sensitive keychain data, and it's written in a programming language that makes it harder for security tools to catch.

3 min read
Illustration: A smartphone screen displaying an Apple security warning notification
Threat Intelligence

Apple warns another wave of iPhone users they are being targeted by spyware-for-hire

The company sent a fresh round of high-confidence alerts on 13 August, the latest in a program that has quietly notified targets in more than 150 countries since 2021.

3 min read
An empty high-rise apartment building in an urban development with rows of vacant units visible through windows, police vehicles parked outside, representing th
Threat Intelligence

Malaysia's Ghost-City Scam Factories: How Criminals Turned a Failed Mega-Development Into a Fraud Hub

Police arrested 335 people running fake investment and romance scams out of empty apartments in Forest City, a $100 billion Malaysian development that was meant to house 700,000 people but never came close.

4 min read
A police operation with officers in tactical gear entering a building, seized computers and cash visible on tables, international law enforcement insignia prese
Threat Intelligence

Ukrainian police shut down 94 scam call centres, seize $2 million in cash

A joint operation with German investigators dismantled fake investment platforms and bank-impersonation scams targeting victims across the EU.

4 min read
A financial trading floor or merger room with large screens displaying acquisition announcements and deal values, executives reviewing contracts, representing c
Threat Intelligence

21 Cybersecurity Companies Changed Hands in July 2026

From a billion-dollar identity security deal to a bank buying a British consultancy, July was a busy month for cybersecurity acquisitions. Here is what each deal means in plain English.

4 min read
A computer screen displaying lines of code and network diagrams in the dark, with cascading error messages and system alerts visible, suggesting automated intru
Threat Intelligence

AI Agents Ran a Four-Day Hacking Campaign Against Taiwan's Government Systems

Researchers say a cluster of AI programs worked in near-total automation to steal credentials, map government networks, and probe a nuclear safety agency, a sign that organised hacking is getting cheaper and faster.

4 min read
Split-screen digital representation showing cryptocurrency exchange data on one side and government email infrastructure on the other, both displaying intrusion
Threat Intelligence

Meet Jewelbug: The Chinese Hacker-for-Hire Group Stealing Crypto and Spying on Governments at the Same Time

A single criminal outfit runs a massive cryptocurrency scam network with one hand and breaks into Middle Eastern government email systems with the other. Researchers say the group almost certainly works for China.

4 min read
An industrial manufacturing facility floor with modern machinery, overlaid with digital security warning graphics and attack indicator symbols appearing on the
Threat Intelligence

Nearly One in Three UK Manufacturers Hit by a Cyber Attack, Survey Finds

A new survey reveals that nearly a third of British manufacturers were hit last year, and half had no plan ready when trouble arrived.

3 min read
A smartphone screen showing banking and payment applications, with malware process chains visualized as overlay graphics and fraudulent transaction confirmation
Threat Intelligence

SpyNote and WindRelay: the Android malware combo that empties bank accounts over a single phone call

Group-IB documents a 13-minute attack chain that installs a remote-access tool, takes out a loan, then relays the victim's contactless card to a criminal at a real payment terminal.

4 min read
© 2026 Threat Vectr