ThreatVectr

Threat Intelligence — Page 2

Macro photograph of green circuit board traces glowing faintly in low light, with one section subtly illuminated in amber suggesting a hidden active signal bene
Threat Intelligence

NeedyMantis: The Hidden Malware That Moves In After the Break-In

Microsoft has named a previously unknown malware family being used against telecoms, universities, and government contractors. The group behind it is linked to China. And once it's inside a network, it's built to stay quiet.

4 min read
Illustration: a dimly lit laptop screen showing a generic email inbox with a red-tinted paperclip attachment icon
Threat Intelligence

Russia's Star Blizzard drops the ClickFix act and switches to one-click RedFlick malware

Microsoft says the FSB-linked crew has scaled up its phishing and streamlined how it plants its CosmicPulse backdoor. More than 100 organisations in the US and UK have been hit this year.

4 min read
Illustration: a glowing server room corridor at night
Threat Intelligence

ShinyHunters Claims FBI Hack Exploiting Oracle Flaw

The cybercrime group says it breached FBI systems using a critical Oracle software vulnerability. The FBI is investigating the claim.

3 min read
Illustration for the story: SectopRAT Hidden Inside Legitimate Audio Software to Steal Passwords and Take Remote Control
Threat Intelligence

SectopRAT Hidden Inside Legitimate Audio Software to Steal Passwords and Take Remote Control

Fortinet's incident responders found a powerful remote-access trojan tucked inside a tampered copy of a real audio program. The malware can grab browser passwords, watch your screen, and hand full control of a Windows PC to criminals.

4 min read
Illustration: a dimly lit industrial control room, rows of SCADA monitors showing abstract pipeline and grid schematics
Threat Intelligence

FBI warns foreign hackers raided a US industrial contractor for SCADA blueprints

A March-April 2025 intrusion at an industrial automation firm netted around 800 files on power and transport customers, and the FBI is telling critical infrastructure to rethink how much access it hands to outside integrators.

4 min read
Illustration: a dark workshop desk with a single unlit Windows laptop screen glowing pale blue
Threat Intelligence

Malware Lets Four AI Models Vote on What to Steal Next

Cisco Talos found a Windows sample that hands its decisions to a small panel of AI models. The lab copy does not run, but the idea is the story.

4 min read
A glowing cluster of interconnected nodes arranged in a voting pattern against a deep navy background, each node pulsing with faint electric-blue light, thin da
Threat Intelligence

CLOSEDQUORUM Runs Its Own Attack Without Asking Anyone

Cisco Talos has identified what it calls the first fully autonomous command-and-control implant: malware that polls a panel of AI models to decide its next move and never checks back with its operator.

4 min read
Illustration: a modern silver laptop on a dark desk
Threat Intelligence

The macOS ClickFix Scam Learned to Hide From Researchers

Microsoft says the fake-fix lure now checks your browser before showing itself, and a related campaign is pushing a new remote-control tool called ChainScript.

4 min read
Illustration: a cluttered corporate mail sorting facility at dusk
Threat Intelligence

Microsoft says Defender missed 221 high-severity emails per thousand users and still won its own benchmark

The vendor's fifth quarterly scorecard shows missed-threat rates climbing across the industry as AI-written phishing gets harder to catch.

4 min read
Illustration for the story: Dutch police dismantle €100m-a-month investment scam run out of 20 call centres
Threat Intelligence

Dutch police dismantle €100m-a-month investment scam run out of 20 call centres

A 46-year-old suspected hacker allegedly built the tech backbone of a fraud operation that duped tens of thousands of savers worldwide.

3 min read
A luxury showroom displaying high-end sports cars and private aviation hangers, with investigators examining purchase records and financial transactions linked
Threat Intelligence

Sports Cars, Private Jets, Mansions: How a $240 Million Bitcoin Theft Ended in Arrests

A group of crypto criminals stole $240 million in Bitcoin from a single victim, then spent so openly that investigators barely had to look.

2 min read
A security operations center with multiple monitors displaying threat intelligence reports being automatically converted into active defense rules with real-tim
Threat Intelligence

Mars Security Launches Tool That Turns Threat Advisories Into Live Detection Rules in Minutes

A new platform feature promises to close the gap between a published hacking report and an actual working defence, automatically tested against a company's own historical data before anyone clicks deploy.

4 min read
Illustration: a modern Brazilian bank branch interior with security cameras visible
Threat Intelligence

Slim Spider: The Brazilian Crew Quietly Robbing Banks Through Pix

A newly named criminal group is targeting Brazil's financial system with deep knowledge of instant payments and crypto custody.

3 min read
A network load balancer device display with memory usage graphs and running processes listed, with highlighted PHP application threads suggesting hidden injecte
Threat Intelligence

Stealthy Linux rootkit hides inside F5 BIG-IP devices and runs entirely from memory

Researchers say the implant, tracked by ESET as PoisonedRefresh, hooks Apache to slip a hidden web shell into legitimate PHP files without ever touching disk.

4 min read
A retail website checkout page showing a shopping cart with product images and payment form, with ghosted duplicate storefronts overlaid behind it suggesting co
Threat Intelligence

The 119,000 fake shops quietly stealing shoppers' card details

A German security firm says 'DoppelCart' is now the largest fake-store network ever documented, cloning real brands and skimming payment data live at checkout.

4 min read
© 2026 Threat Vectr