ThreatVectr

Threat Intelligence — Page 23

Illustration: a darkened office monitor displaying a generic fake CAPTCHA verification page reflected in a glass surface
Threat Intelligence

ClickFix: The Fake Error Pop-Up That Tricks You Into Hacking Yourself

A scam that launched in 2024 has grown into a thriving criminal marketplace. Researchers say standard antivirus tools are missing it almost entirely, and they have built a new detection method to fill the gap.

4 min read
Illustration: A dim school computer lab at dusk, rows of identical monitors glowing with abstract blue browser windows
Threat Intelligence

Fake Student Proxies on npm Turned Browsers Into a DDoS Weapon

JFrog researchers say 148 malicious packages used npm as free hosting for a booby-trapped proxy site, quietly enlisting students' browsers into an attack campaign that ran for roughly two weeks in May 2024.

3 min read
Illustration: a laptop screen showing a blurred generic calendar-booking interface with a small login popup window
Threat Intelligence

Fake Guardian Articles Are Tricking People Into Scam Investment Sites

Criminals are building convincing copies of trusted news websites, complete with fake celebrity stories, to push victims toward fraudulent trading platforms.

3 min read
Illustration for the story: Scammers Are Calling Telstra Customers and Pretending to Help After Last Week's Outage
Threat Intelligence

Scammers Are Calling Telstra Customers and Pretending to Help After Last Week's Outage

Criminals are cold-calling Australians and posing as Telstra staff in the days after a national network failure. Here's what happened, what data could be at risk, and what to do if your phone rings.

3 min read
Illustration: A dim control room at a water treatment facility at night
Threat Intelligence

Russian Spies Are Breaking Into the World's Routers. The Password Is Often Still 'Admin'.

A joint advisory from the US, UK, and a dozen allied nations warns that Russian FSB hackers have spent years walking into critical infrastructure networks through the digital equivalent of an unlocked front door.

3 min read
Illustration: a developer's dark workstation at night
Threat Intelligence

Malicious Jscrambler npm package stole developer secrets for two hours before takedown

A poisoned release of the Jscrambler npm package was downloaded almost 1,500 times, scooping up cloud keys, wallet seed phrases and browser credentials before the company pulled it.

3 min read
Illustration: a modern silver laptop open on a dark wooden desk
Threat Intelligence

CrashStealer: the new Mac malware that slips past Apple's own safety checks

Researchers at Jamf Threat Labs say the C++-based stealer used an Apple-notarised installer to bypass Gatekeeper and grab passwords, browser data and crypto wallets from macOS users.

4 min read
Illustration: a laptop screen showing a generic browser extensions settings page with one entry greyed out and marked as
Threat Intelligence

Chrome and Edge Yank ModHeader Extension After Hidden History Collector Found

The browser add-on had 1.6 million users. A dormant tracker sat inside its official store version, though no evidence suggests it ever ran.

3 min read
Illustration: A dimly lit room with a single desk lamp casting warm light over a keyboard and monitor displaying green
Threat Intelligence

From Prison to Cybersecurity Advocate: The Jesse McGraw Story

Once known online as GhostExodus, Jesse McGraw hacked hospital systems as a teenager, went to federal prison, and came out the other side trying to help defenders. His story is a rare look at what radicalises young hackers and what, sometimes, pulls them back.

3 min read
Illustration: a modern smartphone lying face-up on a dark desk
Threat Intelligence

Five Londoners Charged Over Russian Coms, the Scam-Call Platform Behind 1.8 Million Fake Calls

The UK's National Crime Agency says the platform helped criminals impersonate banks and police, costing an estimated 170,000 victims tens of millions of pounds.

3 min read
Illustration: a dark server room with a single glowing monitor in the middle distance displaying faint blue Windows-
Threat Intelligence

Attacker Uses AI-Written PowerShell Script to Map a Company's Network

Researchers say an unknown intruder ran a script that looks machine-generated to catalogue users, computers and domain controllers inside a Windows network.

4 min read
Illustration: a dimly lit server rack in an industrial control room, focus on a network router with blinking amber LEDs
Threat Intelligence

Russian FSB hackers are quietly hijacking routers at hospitals, power firms and banks, nine countries warn

A joint advisory from the US, UK, Australia and six allies names FSB Centre 16 as the group scanning the internet for routers with weak passwords and old Cisco flaws.

4 min read
Illustration: a dimly lit server room with one rack door left ajar, faint blue LED glow spilling out onto a concrete floor
Threat Intelligence

A Phishing Crew Forgot to Lock Its Own Front Door

A single sloppy command in a shell history file handed French researchers the full toolkit behind three live Microsoft 365 phishing operations.

3 min read
Illustration: a modern Android smartphone lying on a dark matte desk
Threat Intelligence

RedHook Android Malware Turns Phones Into Their Own Debugging Tool

A new build of the RedHook trojan tricks Android users into switching on Wireless Debugging, then quietly promotes itself to a privilege level normal apps can never reach.

4 min read
A dimly lit government office at night, rows of empty desks with old CRT and flat-screen monitors glowing faintly with generic login prompts, a single overhead
Threat Intelligence

Suspected Chinese and Indian Spies Both Targeted Pakistani Police, Researchers Say

A two-year campaign hit Balochistan Police and other law enforcement bodies, with servers holding criminal records among the compromised assets.

3 min read
© 2026 Threat Vectr