ThreatVectr

Threat Intelligence — Page 5

A search engine results page filled with malicious links and fake tech-support pop-ups, traced back through investigation documents to obscured IT operations in
Threat Intelligence

BengalSEO: The Decade-Old Rajasthan Operation Poisoning Bing Results

Researchers say two Indian IT firms have quietly gamed search engines since 2015 to push malware and fake tech-support pop-ups.

4 min read
A young man at a desk looking at a smartphone screen with an uncomfortable expression, multiple chat conversation windows visible on his computer monitor behind
Threat Intelligence

Crime Gangs Are Running Bot-Powered Sextortion Factories. Young Men Are the Target.

Organised criminal networks are using AI-generated fake personas, automated accounts, and psychological pressure to extort young men out of thousands of dollars. South Australia alone lost $217,000 in a single year.

4 min read
An automotive manufacturing plant floor with assembly line equipment, computer terminals showing system errors, and notice boards with HR information posted, co
Threat Intelligence

Jaguar Land Rover to Cut Up to 4,000 Jobs After Cyber Attack and Trump Tariffs Hit Revenue

Britain's largest car maker is opening a voluntary redundancy programme after falling sales, a cyber attack, and new US import taxes stripped away profit.

3 min read
A computer screen displaying browser extensions panel with a suspicious entry highlighted among legitimate extensions, system files and trust certificates visib
Threat Intelligence

PEEP: The Fake Bookmarks Extension That Turns Chrome Into a Backdoor

Researchers have detailed a post-exploitation toolkit that quietly slips into Chrome and Edge profiles by forging the browser's own trust files.

4 min read
A corporate network diagram projected on a screen with IT technician at desk, remote support software interface visible, malware infection paths shown spreading
Threat Intelligence

Hackers Are Hijacking Remote-Support Software to Spread Malware Across Whole Networks

A modified version of the popular IT tool ScreenConnect is being used in a self-spreading attack that starts with a fake tech-support call and ends with criminals inside your entire network.

3 min read
A security researcher's workstation showing decompiled JavaScript code on the screen, Google login credentials highlighted, malware analysis tools open, network
Threat Intelligence

JSCeal: The Hidden JavaScript Malware Stealing Google Logins

Researchers at Check Point have pulled apart a stealthy piece of malware that hides inside compiled JavaScript, steals browser session cookies, and watches what victims do online.

4 min read
A laptop screen displaying a fake video interview interface with a professional background, while a smartphone nearby shows cryptocurrency wallet warnings
Threat Intelligence

Fake Job Interviews Are Draining Bank Accounts. Here Is How the Scam Works.

Criminals posing as recruiters on LinkedIn and Indeed are tricking jobseekers into downloading malware disguised as interview software. One person lost £18,000 in cryptocurrency overnight.

4 min read
A Windows system notification center showing disabled security alerts, with mining activity indicators visible in task manager in the background
Threat Intelligence

REVSTEALER Leaves Four Hidden Programs Behind, One Kills Windows Defender to Mine Crypto

Elastic Security Labs found the info-stealer drops helpers that survive after it self-deletes, including one that switches off Windows Update and Defender before starting a coin miner.

4 min read
A Wellington parking meter in daylight with a fraudulent QR code sticker covering the legitimate one, parked cars visible in the background
Threat Intelligence

Fake QR Code Stickers Found on Wellington Parking Meters

Criminals stuck fraudulent QR codes over real ones on parking meters across New Zealand's capital. Scanning them could send your payment somewhere it was never meant to go.

3 min read
A cybersecurity operations center with multiple monitors showing successful threat detection and blocked breach attempts, representing defended systems
Threat Intelligence

ShinyHunters Claimed It Broke Into ReliaQuest. The Reality Is More Complicated.

A cybersecurity company's own employee fell for a fake login page, handing criminals limited access. What happened next is actually a story about defences holding.

3 min read
An email client inbox with messages displayed, some containing hidden Unicode characters visible only in raw code view on a split-screen terminal
Threat Intelligence

Phishing gang hides invisible characters inside emails to slip past filters

Microsoft says attackers are splitting bait words like 'funding' with unprintable Unicode tags so security scanners never see them.

3 min read
A HAProxy load balancer interface showing network traffic monitoring, with malicious code injected into the build logs visible in the background terminal
Threat Intelligence

'Ted' Backdoor Found Baked Into HAProxy Builds at Two South Korean Firms

A never-before-seen Linux implant was compiled straight into the load balancers, letting attackers read web traffic and swap pages for chosen visitors.

4 min read
An office worker at a desk during a phone call, a fake login page displayed on their monitor screen, with a hand reaching toward the keyboard about to enter cre
Threat Intelligence

The Fake IT Call and the Click That Opens the Door

Attackers are skipping the smash-and-grab, choosing polite phone calls, spoofed login pages and poisoned software guides to walk in through the front door.

4 min read
A criminal marketplace interface displayed on dark web browser, infected Windows systems listed as products with pricing and specifications, transaction confirm
Threat Intelligence

BraZetsu: The Python Toolkit Turning Hacked PCs Into Products for Sale

Researchers say the framework lets access brokers package infected Windows machines as ready-to-sell inventory on criminal marketplaces.

3 min read
A global map projection showing phishing attack origins and target locations as glowing lines and nodes, with North American targets highlighted in bright red,
Threat Intelligence

US Now Top Target in Global Phishing Campaign That Hijacks Remote Access Tools

A phishing operation first spotted using fake Canadian tax notices has spread to 46 countries, with nearly half of all sightings hitting American inboxes.

3 min read
© 2026 Threat Vectr