ThreatVectr

Threat Intelligence — Page 9

Norwegian government office buildings with network activity visualizations and DDoS attack wave patterns flooding across the scene, digital disruption evident i
Threat Intelligence

Norway's government login systems knocked offline by third DDoS attack in months

A flood of junk traffic hit the agency that runs Norway's public-sector logins and digital ID, snarling tax and citizen services since Monday morning.

3 min read
A corporate employee at a desk receiving a phishing message, overlaid with technical analysis showing malware code structure and ransomware preparation modules
Threat Intelligence

New 'SynkLoader' Malware Could Be the Opening Move in Future Ransomware Attacks

Researchers at Expel found a modular malicious program that tricks employees into handing over their passwords, hides from security tools, and looks built to prepare corporate networks for ransomware.

5 min read
A text editor displaying seemingly innocent English word lists and passages, with hidden malware code visualized as faint glitching text beneath the surface, su
Threat Intelligence

WordlistLoader Hides Malware Inside Plain English Word Lists

A new delivery tool for a fast-growing password thief disguises harmful code as ordinary text, making it harder for security software to spot the infection before it takes hold.

3 min read
Illustration: two different security operations centers (one dimly lit, one brightly lit)
Threat Intelligence

Two SOCs, Same Attack: CISA Red Team Walks Through One Network, Gets Caught in the Other

CISA ran identical red team drills against a government agency and a water utility. One let the attackers roam for weeks. The other spotted them within hours.

4 min read
A developer's workspace with an npm package manager interface open on the monitor, showing package listings and download counts, with a phishing login page prev
Threat Intelligence

Criminals Turn npm Into Free Hosting for Fake Cloudflare Login Traps

Researchers found 24 packages on the npm registry being used not to poison developers, but as free web hosting for phishing pages that pretend to be Cloudflare's human-check screen.

3 min read
An Interpol office conference room with a large map of Africa and Europe on the wall marked with 22 countries, with officers reviewing case files and financial
Threat Intelligence

Interpol's Operation Jackal IV: 58 arrests target West African fraud networks and Black Axe

A 22-country police push identified 263 suspects tied to romance, investment and business email scams, with South African authorities seizing $2.67 million from a syndicate that targeted retirees.

3 min read
A gamer's desk setup with a computer monitor displaying a fake Minecraft download webpage with malware warnings and McAfee security alerts popping up, surrounde
Threat Intelligence

Fake Minecraft Downloads Are Pushing 'Weedhack' Malware to Gamers

McAfee Labs blocked more than 6,300 attempts to reach lookalike gaming sites that hand out malware instead of a cheat client.

3 min read
Formal graduation invitation cards arranged on a surface, with subtle digital artifacts or code elements emerging from the edges of the cards
Threat Intelligence

Fake Graduation Invites Hide China-Linked Spy Tool in Myanmar

Researchers at Seqrite Labs say Operation QUICSILVER is using booby-trapped invitations to plant a new Go-based backdoor called QUICAgent on government and IT networks.

3 min read
An ATM machine photographed from the front with interior cash mechanisms visible through the open service panel, in a law enforcement evidence context
Threat Intelligence

Eight Years for ATM Jackpotting: What the Sentence Tells Us About Cash Machine Crime

A Venezuelan national just received what prosecutors are calling a record federal prison term for a scheme that drained ATMs of millions. Here is what happened, and why it is harder to pull off than it looks on TV.

3 min read
An electrical substation or power plant facility at dusk, with control room monitors visible through windows showing alert states or system shutdowns
Threat Intelligence

Iran-Linked Hackers Knocked a UK Power Plant Offline for Four Days

A cyberattack tied to Iran shut down a British power station for nearly a working week, raising hard questions about how well the country's energy grid can withstand a determined digital assault.

3 min read
A server room with multiple rack units and blinking status lights, with command-line interface and Linux terminal windows displayed on monitoring screens
Threat Intelligence

Chinese-speaking crew UAT-10147 hits web servers with AI-built tools and a Linux rootkit

The group targets Windows and Linux servers across education, media, tech and gaming, with victims concentrated in Brazil, Bolivia, China, Canada and Vietnam.

4 min read
A person sitting alone on the ground outside a bus station or transport hub at dusk, with luggage nearby and a distant cityscape, conveying displacement and unc
Threat Intelligence

Escaped the Scam Compound, Trapped by the Aftermath

Thousands of workers lured or forced into south-east Asia's cyber-fraud factories are now free. Many have nowhere to go.

3 min read
A federal courthouse building exterior with steps leading to the entrance, American flag visible, on an overcast day
Threat Intelligence

Tennessee Man Gets 77 Years for Running Online Abuse Network Targeting Girls

A federal court sentenced Kyle Spitze, 27, to 77 years in prison for crimes tied to the 764 network, an online extremist group the FBI describes as a form of modern-day terrorism.

3 min read
A banking website login screen displayed on a computer monitor with warning alerts visible, alongside banking documents and a mobile phone on a desk
Threat Intelligence

Three Banking Trojans Are Quietly Draining Accounts Across Two Continents

Manic, Grandoreiro, and ToxicPanda 2.0 are targeting bank customers in Latin America and Europe. Here is what each one does and what ordinary people should watch for.

3 min read
A computer showing a fake news website that mimics legitimate media branding, with investment charts and trading interfaces in other browser tabs open simultane
Threat Intelligence

Fake ABC News Pages and a Swiss 'Broker' Who Never Existed: Inside a $500,000 Investment Scam

An international fraud network linked to Israel, with call centres across Europe and beyond, has taken hundreds of millions of dollars from victims worldwide, including thousands of Australians, using fabricated news sites, invented trading profits and fake debts.

5 min read
© 2026 Threat Vectr