ThreatVectr

Threat Intelligence — Page 27

Illustration: a cluttered developer's desk at night, glowing keyboard
Threat Intelligence

North Korean hackers flood open-source repositories with 108 booby-trapped packages

The Contagious Interview crew is back, seeding npm, Packagist, Go and Chrome with malware aimed at developers.

3 min read
Illustration for the story: Fake Rollup Helper Packages on npm Traced to North Korean Hackers
Threat Intelligence

Fake Rollup Helper Packages on npm Traced to North Korean Hackers

Two look-alike JavaScript packages copied a popular developer tool line-for-line, then quietly opened a back door onto the machines of anyone who installed them.

3 min read
Illustration: A row of outdoor ATM cash machines on a rain-slicked city pavement at night
Threat Intelligence

Three Quick Hits: Canadian Hacker Jailed, Open-Source Flaws Dropped, ATM Jackpotters Sentenced

A week's worth of security stories that deserve a second look, from an Anonymous-linked arrest in Canada to cash-machine criminals facing US prison time.

3 min read
A high-voltage electricity substation at dusk, transformers and steel pylons silhouetted against a deep blue sky, faint control-room glow visible through a dist
Threat Intelligence

Armored Likho: the newly-named hacking crew hitting power grids and government offices

Russian security firm Kaspersky says the group mixes espionage against big institutions with money-driven attacks on ordinary people.

3 min read
Illustration: a modern smartphone lying face-up on a polished wooden desk inside a European parliamentary chamber
Threat Intelligence

A Spyware Investigator Got Spied On: Pegasus Hit an EU Lawmaker Probing Pegasus

Forensic analysis of Stelios Kouloglou's phone shows repeated Pegasus infections while he sat on the European Parliament's own spyware inquiry.

3 min read
Illustration: a modern silver laptop on a dark wooden desk, screen glowing with an abstract blurred password dialog box
Threat Intelligence

PamStealer: Fake Maccy App Hides Mac Password-Grabbing Script

Researchers say the AppleScript malware poses as a popular clipboard tool, tricks users into typing their Mac password, then quietly ships browser data and crypto wallets to its operators.

4 min read
Illustration: a large municipal water treatment facility at dusk, circular sedimentation tanks reflecting fading orange sky
Threat Intelligence

Iran, Russia, and China Have Been Quietly Attacking Water Systems — and the Door Was Usually Left Unlocked

A new threat-intelligence report finds three governments targeting water and wastewater infrastructure, not primarily to poison anyone, but to cause fear, probe weaknesses, and pre-position for future conflict. The tools they're using are embarrassingly basic.

3 min read
Illustration: a Southeast Asian power plant at night, with a cybersecurity threat theme
Threat Intelligence

Chinese Cyber Group Targets Southeast Asian Utilities with New Backdoor

A China-linked group has successfully breached electricity and water providers across Southeast Asia, deploying a previously undocumented backdoor tool built to erase its own tracks.

3 min read
Illustration for the story: Fake Guest Photos Are Handing Hackers Long-Term Access to Hotel Networks
Threat Intelligence

Fake Guest Photos Are Handing Hackers Long-Term Access to Hotel Networks

Two separate campaigns are targeting hotel front desks and booking teams with booby-trapped zip files dressed up as guest photographs, and the goal isn't a quick smash-and-grab. It's a quiet, lasting foothold.

3 min read
Illustration: floodlights illuminating the pitch, surrounding city lights fading into the distance
Threat Intelligence

Before the Crowds Arrive: Why Event Security Has to Start Online

From the FIFA World Cup to America's 250th birthday celebrations, the biggest gatherings of 2025 face threats that begin weeks before the first ticket is scanned, and most of those early warning signs appear on the internet, not at the gate.

3 min read
A computer screen displaying a fake error message with a prompt to paste a command, in an office environment
Threat Intelligence

ClickFix: Emerging Favorite for Cybercriminals in Malware Delivery

New ReliaQuest research shows ClickFix drove nearly 28% of defense-evasion activity between March and May 2026, and it's now hitting macOS for the first time.

3 min read
Extreme close-up of a glowing laptop screen in a dim office, displaying a realistic login page, with a faint ghostly reflection of the same page morphing into a
Threat Intelligence

Phishing Emails Now Study Your Phone Before They Attack You

A new wave of scam emails quietly profiles your device, your operating system and your screen size, then delivers malware tailored specifically to your setup.

3 min read
Illustration: an offshore oil and gas drilling platform at dusk, surrounded by calm dark ocean water
Threat Intelligence

Chinese Spy Group Lures Energy Workers With Fake Australian News Site — Then Steals Everything They Type

A state-linked hacking group spent two months tricking employees at offshore energy companies into visiting a bogus news website that silently recorded their keystrokes.

3 min read
Illustration: a smartphone screen at night showing a generic green messaging app icon with a red notification badge
Threat Intelligence

US warns Russian spies are still hunting your WhatsApp and Signal accounts

CISA and the FBI say Russian intelligence officers are running fresh phishing campaigns to hijack accounts on messaging apps used by journalists, officials and activists.

3 min read
Illustration: a busy international airport terminal, shot from above at dusk
Threat Intelligence

TA558 Is Back, Targeting Hotels and Airlines With Fake Booking Emails

A criminal group that has quietly stolen travel-industry data since 2018 has dramatically ramped up its fake-reservation campaigns, now using compressed file tricks to sneak spying software onto victims' computers.

3 min read
© 2026 Threat Vectr