ThreatVectr
Tag

#backdoor

17 stories taggedbackdoor.

Extreme close-up of a glowing laptop screen in a dim office, displaying a realistic login page, with a faint ghostly reflection of the same page morphing into a
Threat Intelligence

Pakistan's Transparent Tribe Is Spying on Afghan Telecom Workers With Fresh Malware

A Pakistani hacking group has been quietly breaking into government and telecom targets in Afghanistan using two newly documented tools. India was in their sights too, but appears to have held the line.

4 min read
Full-frame photoreal editorial shot of a dimly lit server rack in a utility control room, focus on a network router with blinking amber status LEDs and tangled
Threat Intelligence

PATCHCORD: The Fake VPN Installer Hitting Afghan Phone Networks and Indian Infrastructure

A new backdoor is being smuggled onto computers through fake Afghan Telecom software, and researchers say critical services in South Asia are in the crosshairs.

3 min read
A dense grid of glowing green and amber data packets flowing through dark fiber-optic tubes, photographed in macro with sharp focus on the structured geometric
Vulnerabilities

Russian hacktivists hijack TrueConf video servers to push booby-trapped installers

Kaspersky says the Head Mare group exploited two unpatched flaws in TrueConf conferencing servers to swap the real client installer for one carrying the PhantomCore backdoor.

4 min read
Photoreal news-editorial aerial view of a vast network of illuminated fiber-optic cables converging on a central node that has gone dark, surrounding nodes stil
Threat Intelligence

Twenty Chinese Router Models Ship From The Factory With A Hidden Backdoor

Researchers at VulnCheck say every current Zbtlink firmware image contains an implant that phones home to Chinese servers and hands attackers root access.

4 min read
Aerial view of a Southeast Asian power plant at night, with a cybersecurity threat theme
Threat Intelligence

Trojanised QuickFox VPN installer plants stealth backdoor on users' PCs

Fortinet researchers say a tampered version of the China-focused VPN app has been serving the FDMTP backdoor since at least August 2025, with tradecraft that overlaps activity tracked as Silver Fox.

3 min read
Full-frame photoreal news-editorial image of a dimly lit government office at night, a single desktop monitor glowing with an abstract green download progress b
Threat Intelligence

Brazilian Government Sites Turned Into Malware Traps in PhantomEnigma Campaign

Attackers quietly took over more than 20 official .gov.br domains and used them to push a stealthy backdoor, according to new analysis from ANY.RUN.

3 min read
A close-up overhead shot of a hard drive with its metal casing partially open, the magnetic platters reflecting a deep red light
Threat Intelligence

GigaWiper: The Swiss Army Knife of Destructive Malware

A newly named piece of malicious software has been quietly spreading for over eight months, combining spying tools, file destroyers, and fake-ransomware tricks inside a single package.

3 min read
Close-up, editorial news photograph, 16:9 framing, of a server rack in a dark data centre with one hard drive pulled halfway out, its surface reflecting faint r
Threat Intelligence

Microsoft Exposes GigaWiper, a New Malware That Spies on Victims Before Destroying Them

A newly discovered backdoor called GigaWiper quietly watches infected computers for months, then wipes or encrypts everything on command, with no way to recover the data.

3 min read
Full-frame photoreal editorial shot of a dark server room with a single rack unit pulled forward, its indicator lights glowing red instead of green, faint smoke
Threat Intelligence

Microsoft Pulls Apart 'GigaWiper', a Windows Backdoor That's Really Three Old Wreckers in a Trench Coat

The malware lets its operator pick how to trash a machine: wipe the disk, kill the Windows drive, or fake a ransomware attack with a key that's thrown away.

3 min read
Photoreal news-editorial style, 16:9 framing, full-frame edge-to-edge composition
Vulnerabilities

A Secret Backdoor in Tenda Home Routers Lets Strangers Take Control, and There Is No Fix

A hidden login trick buried in Tenda networking gear gives anyone who knows the magic password full administrative control. The maker has not responded, and no patch exists.

3 min read
A close-up, editorial-style photograph of a small black wireless router sitting on a plain wooden desk in a modest office, indicator lights glowing faintly gree
Threat Intelligence

Chinese Hacking Group Adds Three New Backdoors to Its Router Attack Kit

The group behind a long-running campaign targeting small office routers has quietly expanded its toolbox, giving it more ways to hide inside a victim's network.

3 min read
Full-frame photoreal editorial shot of a small black consumer Wi-Fi router on a plain desk, indicator lights glowing amber, softly lit from one side, moody shad
Vulnerabilities

Hidden Admin Backdoor Found in Tenda Router Firmware, CERT/CC Warns

A flaw tracked as CVE-2026-11405 lets anyone skip the password check and take over affected Tenda routers through the web interface.

3 min read
Photoreal news-editorial style, 16:9 framing, full-frame edge-to-edge composition
Threat Intelligence

North Korean Hackers Poisoned Over 100 Open Source Packages to Spy on Developers

A campaign called PolinRider has quietly corrupted legitimate software building blocks used by developers worldwide, planting tools that steal data and leave a hidden door open for attackers.

3 min read
Aerial view of a Southeast Asian power plant at night, with a cybersecurity threat theme
Threat Intelligence

Chinese Cyber Group Targets Southeast Asian Utilities with New Backdoor

Critical infrastructure providers in Southeast Asia are facing targeted cyber intrusions from a China-linked group using a novel backdoor tool.

3 min read
Threat Intelligence

Mistic Backdoor Shows Up in IAB-Brokered Intrusions Across Four Verticals

A quiet new implant tied to the KongTuke access broker is landing on insurance, education, IT, and professional services networks — and it's not riding a CVE to get there.

3 min read
© 2026 Threat Vectr