ThreatVectr

Threat Intelligence — Page 25

Illustration: a dimly lit modern open-plan office at night, rows of dark computer screens glowing faintly blue, empty chairs
Threat Intelligence

Your Business Is Already a Wartime Target. Here Is What to Do About It.

Nation-states attacking private companies is not a future risk. It happened at scale in 2017 and the conditions that made it possible have only grown more complicated since.

3 min read
Illustration: A vast server room at night, rows of glowing rack-mounted servers receding into the distance
Threat Intelligence

Eight in Ten Corporate Servers Can Be Reached From Anywhere Inside the Same Network

A study of 54 trillion real-world network events found that most enterprise servers are wide open once an attacker gets past the front door, and many organisations have no clear idea how bad the exposure is.

3 min read
Illustration: a modern home desk with an open laptop showing a generic software installer progress bar, a coffee mug
Threat Intelligence

Fake 7-Zip Downloads Are Quietly Turning Home PCs Into Criminal Middlemen

A group Infoblox calls Lurking Lizard has been running a rogue proxy service from more than 230 lookalike sites since 2022, hiding the malware inside fake copies of the popular 7-Zip file compression tool.

3 min read
Illustration: a glowing server rack inside a dark data centre
Threat Intelligence

Criminals Are Using GitHub's Own Public Tools to Map Your Company Before They Strike

Researchers at Datadog tracked months of quiet, automated snooping across GitHub that blends perfectly into normal traffic, and most organisations never notice it happening.

3 min read
Illustration: a developer's dark wooden desk
Threat Intelligence

Fake Paysafe and Skrill SDKs on npm and PyPI Went After Developers' Secrets

A single attacker uploaded 17 lookalike payment packages that quietly stole API keys, cloud credentials and GitHub tokens from anyone who installed them.

4 min read
Illustration: A dimly lit university physics laboratory at night, empty of people
Threat Intelligence

China-linked hackers hit university email servers to spy on physics and defence researchers

Proofpoint says a group it calls UNK_MassTraction is chaining two Roundcube flaws at U.S. and Canadian universities to steal logins and plant backdoors.

4 min read
Illustration: A cluttered small-business office desk at night
Threat Intelligence

Fake Pirated Software Ads Are Draining Passwords and Hijacking Computers to Mine Crypto

A campaign uncovered by Palo Alto Networks researchers tricks people into downloading malware disguised as cracked software, stealing saved passwords while quietly running up victims' electricity bills.

3 min read
Illustration for the story: Chinese Hacking Group Adds Three New Backdoors to Its Router Attack Kit
Threat Intelligence

Chinese Hacking Group Adds Three New Backdoors to Its Router Attack Kit

The group behind a long-running campaign targeting small office routers has quietly expanded its toolbox, giving it more ways to hide inside a victim's network.

2 min read
Illustration: a laptop screen showing a blurred generic corporate login form
Threat Intelligence

'Ghost Phishing' Campaign Slips Past Email Filters by Hiding Until It Reaches the Victim

The EvilTokens operation is hitting companies across the US and Europe with pages that stay encrypted in transit and only unlock inside the target's browser.

3 min read
Illustration: a laptop screen showing a generic blurred verification prompt with a checkbox, warm desk lamp light
Threat Intelligence

Fake CAPTCHA Pages Are Stealing From Mexican Bank Customers

Elastic Security Labs is tracking a fraud campaign, dubbed REF6045, that tricks people into pasting a malicious command from a bogus 'prove you're human' page.

3 min read
Illustration: A large commercial open-plan office at dusk
Threat Intelligence

Blocking Phishing Emails Is Not Enough. Here Is Why the Attack Carries On Anyway.

Filtering a malicious email out of your inbox stops one message, not the criminal behind it. A live webinar on 8 July 2026 sets out what disrupting a phishing campaign at its source actually requires.

3 min read
Illustration: A shadowed office desk in a nondescript suburban business park at dusk
Threat Intelligence

Convicted fraudsters are running a US startup offering $7 million for software exploits

IRIS C2 says it pays up to $7 million for zero-day exploits. Its owners are Jacob Wohl and Jack Burkman, best known for felony robocall convictions and a string of political dirty-tricks stunts.

4 min read
Illustration: a laptop screen glowing in a dim room showing a formal government tax portal interface with official-looking
Threat Intelligence

Fake Tax Emails Are Planting Two Separate Spying Tools on Indian Taxpayers' Computers

A campaign timed to India's tax filing season tricks people into downloading what looks like an official government utility, and inside are two hidden programs that give criminals full remote control of the victim's machine.

3 min read
A close-up, sharply lit photograph of two printed pages lying side by side on a dark desk, one page covered in dense text and tables with several entries circle
Threat Intelligence

Your Threat Feed Said One Thing. The Malware Said Another.

A former incident responder spent two years learning that intelligence reports, federal advisories, and foreign government bulletins share the same quiet flaw: the copy most people read is rarely the full story.

4 min read
A smartphone resting on a car dashboard at night, its screen glowing with an incoming call notification, rain-blurred streetlights visible through the windscree
Threat Intelligence

Fake DoorDash Calls Are Draining Delivery Drivers' Wallets

Criminals are posing as DoorDash support staff, tricking gig workers into handing over account details, then quietly emptying their earnings. One driver lost $21,000.

4 min read
© 2026 Threat Vectr