ThreatVectr

Threat Intelligence — Page 3

A laptop screen displaying a login form overlaid with transparent code and data structures, suggesting layers of legitimate services being repurposed for decept
Threat Intelligence

Phishing Pages Built Inside Your Browser: How Attackers Are Using Microsoft's Own Tools Against You

A new phishing technique assembles fake login pages directly inside the victim's browser, using legitimate Microsoft services so there is no suspicious website for security tools to find and block.

3 min read
Multiple computer monitors displaying cascading code and exploit payloads, with Windows logos and Chrome browser icons arranged across screens in a dimly lit op
Threat Intelligence

Four Spy Crews Fired the Same Chrome and Windows Exploit Kit in One Week

Researchers say a previously unseen toolkit called BlueMoon, first used by China-linked APT31, was shared across multiple espionage groups to break into browsers and take over Windows machines.

4 min read
A tropical coastline at dusk with concrete compound buildings visible inland, cryptocurrency symbols digitally overlaid faintly across the sky, suggesting seize
Threat Intelligence

U.S. Takes Down Xinbi Guarantee, a Telegram-Based Scam Bazaar

The Justice Department seized channels, froze $52.8 million in crypto, and sent a strike team to Madagascar to break up 13 scam compounds tied to Chinese organized crime.

4 min read
An Android smartphone interface showing a hidden work profile nested within the phone's settings, with a fake banking app icon visible inside the concealed prof
Threat Intelligence

Gigabud Banking Malware Hides Inside Android Work Profiles to Dodge Security Checks

A new Gigabud variant sets up a separate Android work profile and installs a fake banking app inside it, keeping malicious activity hidden from the phone's normal security scans.

3 min read
A smartphone displaying a fake casino or gaming app store interface with fraudulent ratings and reviews, social media ads visible in the background, inside a di
Threat Intelligence

Fake Apps Are Hiding in Google Play's Beta Program to Dodge Public Reviews

Scammers are uploading sham casino and gaming apps to Google Play's Early Access program, where there are no public ratings or warnings, then buying social media ads to pull in victims.

3 min read
A security analyst's workstation displaying a real-time threat dashboard with login attempts, phishing emails, and identity abuse alerts covering the screens, w
Threat Intelligence

Half of All Real Attacks Now Target Logins, Says Prophet Security Review

A quarter of investigating every alert across customer environments shows identity abuse, help-desk trickery and old-school phishing still doing most of the damage.

4 min read
A security incident montage showing overlapping vulnerabilities from the week—malicious browser extensions installing, phishing pages inside legitimate platform
Threat Intelligence

The Week's Security Mess: Why Did Any of This Work in the First Place?

From greedy browser extensions to phishing pages built inside trusted services, this week's incidents share one uncomfortable answer.

4 min read
A creator's smartphone showing a fake copyright strike notification, a dialogue demanding ransom payment, with Meta's lengthy appeals process timeline displayed
Threat Intelligence

Instagram Creators Are Paying Ransoms to Scammers Filing Fake Copyright Claims

Fraudsters are abusing Instagram's copyright reporting system to shake down creators for hundreds of dollars, knowing Meta's slow appeals process gives victims little choice.

4 min read
An Android phone screen showing locked files with a ransom demand popup, aggressive warning screens cycling with alarm-like visuals and hostile messaging design
Threat Intelligence

Mantax Otax: The Android Malware That Locks Your Files, Then Screams At You Until You Pay

Indonesian operators are pushing an unusual Android malware that combines file-locking ransomware with spyware, screen recording and jumpscare harassment tactics designed to bully victims into paying.

4 min read
A Windows desktop with a keyboard input tool interface in the background subtly transforming into a command-and-control dashboard, system access icons appearing
Threat Intelligence

China-linked hackers slipped a backdoor onto PCs through Sogou, a popular Chinese typing tool

Researchers tracking the cluster as UNC3569 say a single crafted link was enough to hand attackers full control of a victim's Windows machine.

3 min read
A security operations center with multiple monitors displaying alert systems, one showing a SIM card symbol with warning indicators, another with an internation
Threat Intelligence

Invisible Characters, SIM Swap Jail Time, and a $10 Million Bounty: This Week's Security Briefing

A trick that hides malicious text from spam filters, a phone-hijacking criminal now behind bars, and a US government reward for help catching an Iranian hacking official.

3 min read
A laptop screen displaying a government website with a fake security warning popup, a command-line interface or paste dialog visible, with a keyboard in the for
Threat Intelligence

A Government of India Website Is Tricking Visitors Into Running Malware From Their Own Keyboard

A fake security check on a page linked to India's STPI quietly loads a harmful command onto visitors' clipboards, then asks them to paste and run it themselves.

4 min read
A domestic scene with a smartphone on a table displaying a car manufacturer's app and financial documents, with evidence tags or court documentation nearby, sug
Threat Intelligence

How a Fraudster Used a Tesla App and a Fake Job Contract to Trap His Wife

Enrico Pucci was convicted of 30 offences including stalking, assault, and coercive control after using technology, financial deception, and sustained psychological manipulation to dominate and isolate his partner Narghiza Ergashova.

4 min read
An aircraft boarding bridge or airport corridor with law enforcement officials present, suggesting arrival and extradition, with international airport signage v
Threat Intelligence

Six Black Axe Members Extradited from South Africa Over $6 Million Romance Scam

Six Nigerian nationals landed in the United States on September 11, 2026, to face federal fraud charges after five years in a Cape Town jail. Their alleged network drained more than $6 million from over 100 American women through fake online romances.

3 min read
Illustration: a world map with three nations highlighted on the wall behind it
Threat Intelligence

North Korea's Fake-Employee Scheme Now Recruits Workers From Iran and Lebanon

What began as a North Korean operation to sneak remote workers into U.S. tech companies has grown into a multinational scheme, with recruits now drawn from Iran and Lebanon.

3 min read
© 2026 Threat Vectr