ThreatVectr

Threat Intelligence — Page 4

A streaming platform interface on a monitor with a browser extension icon highlighted in red, data packets flowing digitally across the screen toward an obscure
Threat Intelligence

Malicious Twitch Extension Siphoned Login Tokens From 31,000 Viewers

A browser add-on marketed as a Twitch viewer tool quietly forwarded OAuth tokens to servers linked to a Russian bot-for-hire service.

4 min read
A layered split-screen showing AI agent automation workflows on the left, WeChat interface with suspicious forwarding patterns in the center, and legacy securit
Threat Intelligence

Rogue AI Agents, a WeChat Worm and PaperCut Attacks Say Something About Basic Security

Attackers are pushing AI into more of their workflow, and old bugs are still doing most of the damage.

4 min read
A map showing Taiwan and six other countries highlighted, with a network diagram overlaid displaying Gitea repository servers and scanning patterns radiating ou
Threat Intelligence

China-Linked Red Heron Turns Gitea Flaw Into a Seven-Country Break-In Spree

Acronis researchers say the group scanned nearly 1,400 self-hosted code servers and singled out 477 systems in Taiwan.

3 min read
A Reddit thread from a verified entertainment account flooded with copy-pasted scam messages, Windows and Mac malware warning popups appearing in separate brows
Threat Intelligence

Hijacked HBO Max Reddit account pushed 108 malware ads in 48 hours

A verified account was used to run a copy-paste scam that infected Windows and Mac users with password stealers and crypto-wallet thieves.

4 min read
A Thai office environment with servers humming in the background, a remote access management tool interface open on a technician's monitor showing active sessio
Threat Intelligence

Intruder Sat Inside Thai Broadband Giant 3BB, Using Off-the-Shelf Admin Tool to Stay Hidden

A hacker held remote control of internal machines at one of Thailand's biggest internet providers by piggybacking on MeshCentral, a legitimate IT management tool, according to researchers at Hunt.io.

4 min read
A computer server room with glowing neural network visualizations on displays, an open access panel revealing circuitry, and a shadowy figure's hand reaching to
Threat Intelligence

Spies and Criminals Are Stealing AI Systems, Not Just Data

Google's threat research team says nation-state hackers and extortion gangs are now going after the AI models, cloud accounts, and secret access keys that companies use to run artificial intelligence, turning those stolen assets into weapons for their own attacks.

4 min read
A network visualization showing interconnected IoT devices across Asia and South America on a world map, with hidden backdoor pathways glowing in the mesh, mess
Threat Intelligence

New BambooToken Malware Hides Its Orders Inside IoT Messaging Traffic

Researchers at Lumen's Black Lotus Labs say the backdoor has quietly infected around a dozen firms across Asia and South America since 2023, using a chat protocol built for smart devices to stay hidden.

4 min read
A smartphone screen displaying the Telegram messaging app interface, with surveillance camera icons and technical monitoring overlays visible in the background,
Threat Intelligence

Iran's Spy Malware Runs on Telegram, Western Agencies Warn

US, UK and Dutch cyber agencies say Iranian intelligence uses a Windows tool controlled through Telegram to watch dissidents and activists abroad.

3 min read
A browser window showing Chrome and Edge icons merging together, with a banking interface glimpsed in the background and warning alert dialogs cascading across
Threat Intelligence

KREMLIN Toolkit Turns Chrome and Edge Into Brazilian Bank-Robbing Tools

Elastic Security Labs has pulled the lid off REF9334, a Brazilian crew pushing a rogue browser extension that impersonates a dozen local banks.

3 min read
A social media advertising dashboard showing multiple fake casino ads masquerading as legitimate retail brand promotions, with Tesco branding being hijacked acr
Threat Intelligence

Tesco alerts City of London police after fake casino ads hijack its brand on Facebook and Instagram

Unlicensed gambling sites are impersonating well-known brands and celebrities in social-media ads. Tesco is the latest target, and the pattern points to a systematic problem with how ad platforms verify who is really buying space.

3 min read
A laptop displaying a counterfeit e-commerce checkout page designed to mimic Apple's official store, with iPhone 18 Pro imagery and payment forms, while a curso
Threat Intelligence

Fake iPhone 18 Deal Sites Are Stealing Money From Shoppers

Criminals are setting up convincing fake shops to target anyone searching for a cheaper price on Apple's new iPhone 18 Pro and foldable Duo. If you pay, the phone never arrives.

3 min read
A split-screen view: on one side, the Telegram messaging app interface on a mobile device; on the other, data packets and command signals flowing through digita
Threat Intelligence

US, UK and Dutch Agencies Reveal Iranian Surveillance Tool That Hides Inside Telegram

A joint government report names 'Chosen Brick', a spying program linked to Iranian operators that uses Telegram to receive stolen data and issue commands.

3 min read
An illustrated digital landscape showing a corporate network perimeter mapped from above like a city, with multiple entry points, devices, and access nodes high
Threat Intelligence

Attack Surface Management Explained

Every device, app, and login point a company exposes is a potential door for criminals. Attack surface management is about mapping all those doors before anyone else does.

3 min read
A security research facility with multiple threat intelligence dashboards displayed on screens, showing attack campaign attribution maps and malware analysis da
Threat Intelligence

Kaspersky Names Three Hacking Crews Going After Russian Companies

Kaspersky says NightEagle, Hacking Cat and Toy Ghouls are running separate campaigns against Russian firms, with NightEagle showing fresh persistence tricks.

3 min read
A computer workstation displaying cascading code and network diagrams in dim blue light, with forensic investigation equipment and documentation scattered acros
Threat Intelligence

Australian police arrest two alleged members of TeamPCP supply-chain crew

The pair, from Western Australia, are linked to a hacking collective that poisoned open-source software used by thousands of companies, and to the extortion crew Fulcrumsec.

4 min read
© 2026 Threat Vectr