ThreatVectr

Threat Intelligence — Page 7

Internet routing infrastructure visualization showing network packets and DNS paths, with one segment highlighting a poisoned update server delivering malicious
Threat Intelligence

Hackers hijacked internet routing to push a poisoned Virtualizor update

Softaculous says attackers rerouted its update servers for 33 hours, delivering a malicious update to a small number of hosting providers running Virtualizor.

4 min read
A developer's laptop showing a code repository and package manager interface with 13 malicious theme libraries listed, alongside a smartphone running older iOS
Threat Intelligence

Booby-trapped Composer packages hijack Vietnamese streaming sites to hit old iPhones

Thirteen fake theme libraries on Packagist quietly loaded ad-fraud scripts and pushed spyware at visitors running unpatched iOS, researchers say.

4 min read
A laptop screen displaying a job recruitment email and coding challenge test file, Mac and Linux system environments visible, malicious payload hidden within th
Threat Intelligence

Iranian Hackers Nimbus Manticore Target Mac and Linux With Fake Job Tests

Kaspersky says the state-linked crew is now posing as recruiters and hiding remote-access malware inside coding challenges sent to job hunters.

3 min read
A laptop screen showing a convincing fake captcha verification popup while a user's finger hovers near the keyboard, office background blurred, moment of social
Threat Intelligence

ClickFix: The Attack That Talks You Into Hacking Yourself

Microsoft says the fake 'prove you're not a robot' trick was the single most common way criminals broke into companies last year. The clever bit is that the victim does the hard work.

4 min read
ATM machine interior components exposed, circuit boards and cash dispensing mechanisms visible, malware installation tools nearby, security camera footage times
Threat Intelligence

Five Venezuelans Admit to ATM 'Jackpotting' Plot That Cost US Banks Millions

The men tried to force cash machines in Kansas to spit out cash using malware. Surveillance cameras caught them, and federal prosecutors say they are part of a wider wave that stole more than $20 million last year.

3 min read
A laptop displaying a fake NFL player dating profile overlaid with false investment account screenshots and wire transfer confirmations, smartphone showing simi
Threat Intelligence

Man Posed as NFL Player to Steal $1.3 Million from 26 Women Across Four States

Federal prosecutors say Daejon Love used dating apps, fake investment accounts, and a made-up San Francisco 49ers identity to run a romance fraud that took over a million dollars from victims in Oregon, Washington, Idaho and California.

3 min read
A computer monitor showing gaming platform and chat application icons, parents' concerned faces in soft focus, subtle warning signs and predatory messaging patt
Threat Intelligence

The group called 764 is grooming children online. A mother explains what that really means.

A US sentencing this month put a spotlight on 764, a network of online predators who target minors through gaming and chat platforms. One mother's account makes clear this isn't a distant problem.

3 min read
Blockchain network interface showing token price chart spiking 100x in minutes, then collateral liquidation cascade, validator nodes displaying rollback and cha
Threat Intelligence

Cronos halts and restarts blockchain after $74M Tectonic lending exploit

An attacker inflated the price of a small token by 100 times in 20 minutes, then borrowed real assets against it. Validators froze the chain and rolled it back.

3 min read
A Windows Terminal window open on a user's screen displaying a spoofed CAPTCHA popup above it, malicious command strings visible in the terminal ready to be pas
Threat Intelligence

TerminalFix: The Fake CAPTCHA That Opens a Back Door Into Company Networks

Microsoft has spotted a new twist on the ClickFix scam that pushes victims to paste attacker commands straight into Windows Terminal, ending with a hidden tunnel into the internal network.

4 min read
A hospital hiring portal and sales department recruitment webpage showing legitimate-looking job applications and video interview screens, subtle indicators of
Threat Intelligence

North Korea's Fake Worker Scheme Now Reaches Into Hospitals and Sales Teams

The DPRK-linked hiring fraud that dogged tech firms is turning up in healthcare and sales roles, widening the insider risk for employers who thought they weren't a target.

3 min read
Close-up of a router's ethernet ports glowing with activity lights, a single red warning indicator blinking among the green, dust settling on the device's venti
Threat Intelligence

The Week in Identity: Router Backdoors, Off-Task AI Agents, and Login Kits for Sale

A weekly roundup of the dull-sounding defaults, forgotten bugs, and helpful chatbots that quietly handed attackers the keys this week.

4 min read
A Windows PC startup screen with a wallpaper application installer window open, system security warnings visible in the taskbar, antivirus trust indicators high
Threat Intelligence

ValleyRAT Malware Hides Inside Signed Chinese Wallpaper App to Bypass Antivirus

Silver Fox is smuggling the ValleyRAT backdoor onto Windows PCs by wrapping it around QN Wallpaper, a legitimate signed program many users have already told their antivirus to trust.

3 min read
A network operations center with multiple screens showing Cisco router interfaces, authentication logs scrolling rapidly, some entries marked as tampered or del
Threat Intelligence

China-Linked 'Fire Ant' Crew Breaks Into Cisco Routers to Steal Passwords and Hide Its Tracks

Sygnia says the espionage group has jumped from VMware servers to core network gear, tampering with logs and siphoning credentials from TACACS authentication servers.

4 min read
A federal courthouse hallway with security barriers, extradition notice documents on a table, the severity of the setting conveyed through harsh institutional l
Threat Intelligence

Two Nigerian men extradited to US over sextortion scams linked to teen suicides

Adebola Festus Adekunle and Mudasiru Afeez Olawale face life sentences after a joint operation tied them to blackmail schemes that ended in the deaths of two American minors.

3 min read
A computer monitor displaying the Chrome Web Store or browser extension marketplace, with multiple suspicious add-on listings visible in the browse interface
Threat Intelligence

Nineteen Browser Extensions Caught Emptying Crypto Wallets

Researchers found 18 Chrome add-ons and one Edge add-on that quietly stole wallet keys and drained funds, in a campaign that may have run for months.

3 min read
© 2026 Threat Vectr