ThreatVectr

Threat Intelligence — Page 8

Illustration: A split-screen
Threat Intelligence

Three Security Stories You May Have Missed: Airport Attack, Fake Breach Data, and a Bank Under Pressure

A busy week in cybersecurity produced a cluster of stories worth attention: a UK airport group hit by hackers, questions over whether a clothing brand's stolen data was real, and a major US bank pushing back on ransomware claims.

3 min read
A command-line terminal window displaying batch script code with Cyrillic character hints and European government email domains visible in logs, set against a d
Threat Intelligence

HOOKEDGE: A New Backdoor Aimed at European Government Networks, With Fingerprints Pointing to Russia

Recorded Future says a lightweight Windows batch script is being used against foreign ministries and government offices in Romania, Spain and Türkiye, with tentative links to the group tracked as APT28.

3 min read
A network security dashboard showing multiple simultaneous attack patterns—botnet activity, fake login attempts, and exploit chains—converging on infrastructure
Threat Intelligence

The Week in Threats: Fake Logins, AI-Powered Botnets, and Shrinking Patch Windows

A 296,000-device botnet, water utilities under scan, and an actively exploited SharePoint chain: this week's pattern is old tricks moving faster.

4 min read
A small business office with security analysts reviewing threat research reports and monitoring dashboards together, showing collaborative threat detection in a
Threat Intelligence

Why Small Firms Are Turning to Outside Analysts to Catch Ransomware Early

ESET argues that pairing threat research with managed detection gives smaller companies a fighting chance against ransomware crews that now industrialise their attacks.

3 min read
A computer screen displaying official-looking Cambodian government and health department documents mixed with property listings, all containing malicious file a
Threat Intelligence

Spark RAT campaign hits Cambodia, using fake government and health notices as bait

Attackers are dropping Spark RAT on Cambodian targets through documents dressed as official government notices, health bulletins and property listings, while using a legitimate security driver to blind the victim's defences.

3 min read
Police vehicles and law enforcement activity outside a technology-related facility in Western Australia, with digital security imagery on nearby screens
Threat Intelligence

Australian Police Arrest Two Alleged Members of Supply-Chain Extortion Crew TeamPCP

The Western Australia arrests target a group blamed for a year-long run of open-source software attacks, including the Shai-Hulud worm that hit thousands of companies.

4 min read
A Venezuelan telecommunications company's server room with network infrastructure and monitoring systems, with code snippets in the Go language visible on adjac
Threat Intelligence

GoCaracal: New Go-Based Spyware Hits Venezuelan Telecom

Arctic Wolf ties a June 2026 intrusion at a Venezuelan communications company to Dark Caracal, using a fresh malware framework written in Google's Go language.

4 min read
A corporate hiring office or HR workspace with employment applications and background check documents displayed, with suspicious red flags and warning indicator
Threat Intelligence

North Korean Spies Are Getting Hired as IT Workers. Here Is How to Spot Them.

Security firm Huntress investigated three separate cases in 2026 where North Korean government operatives had successfully applied for, and been hired into, real jobs at Western companies. The red flags they left behind are now a playbook for anyone doing the hiring.

5 min read
A computer terminal displaying encrypted command-line output and network packet traces, with shadowy server rack infrastructure visible in the background sugges
Threat Intelligence

Iran's Nimbus Manticore Adds New Backdoor and SSH Tunneler to Spy Kit

Group-IB says the IRGC-linked hackers have quietly built out fresh infrastructure and custom malware for espionage campaigns in 2026.

3 min read
A research lab workspace with malware analysis software displayed across multiple monitors, showing binary code and detection signatures, with a small portion o
Threat Intelligence

AI Malware Is Real. It Is Also Mostly Hype.

Palo Alto Networks studied 405 malware samples linked to AI tools. Only 12 ever reached a real computer, and existing defences caught every single one.

4 min read
An underground marketplace interface displayed on a darkened screen, listing reconnaissance services and proxy routing tools with pricing tiers, with law enforc
Threat Intelligence

FBI Pulls Plug on Chinese Espionage 'Quartermaster' That Rented Out Hacking Kit

A commercial-style service sold reconnaissance, proxy routing, and relay networks to China-linked spies targeting US critical infrastructure. Lumen's Black Lotus Labs spent a year mapping it.

4 min read
A water treatment facility control room with SCADA systems and network-connected monitoring equipment, many accessed through exposed modems visible on facility
Threat Intelligence

More Than 100 Water Systems Were Hit by Hackers in July. Here's What CISA Found.

U.S. cybersecurity officials have put a number on the recent wave of attacks on drinking water and wastewater facilities: over 100 internet-connected systems targeted in a single month, most of them left exposed by a simple modem.

3 min read
A dark Windows system tray at the bottom of a screen with barely visible dormant processes, and a network packet animation arriving and triggering system activi
Threat Intelligence

SLEEPWALKER: The Windows Backdoor That Sits Silent Until One Packet Wakes It Up

A stealthy Windows implant hides in memory, defeats automated scanners, and wakes only when a single specially crafted network packet arrives.

4 min read
A series of email windows overlapping on screen showing legitimate property transaction correspondence, with one message subtly redirecting to a fraudulent bank
Threat Intelligence

UK Homebuyers Lose Hundreds of Thousands to 'Friday Afternoon' Email Fraud

Criminals hijack email chains between buyers, solicitors and estate agents to redirect house-purchase deposits into fake bank accounts. One victim lost £300,000.

3 min read
A smartphone with a disabled lock screen, next to a computer showing a subscription payment interface for a phishing kit, with a voice call animation suggesting
Threat Intelligence

AnonyMousKIT: the phishing kit that turns stolen iPhones back into cash

A subscription service is helping thieves trick iPhone owners into handing over the codes needed to disable device locks, with AI-powered phone calls doing much of the work.

4 min read
© 2026 Threat Vectr