ThreatVectr
Tag

#malware-as-a-service

7 stories taggedmalware-as-a-service.

A Mexican bank's branding and interface visible on a compromised computer screen, with a file manager window open showing suspicious executable files disguised
Threat Intelligence

Grandoreiro Banking Malware Is Back, Targeting Mexican Bank Customers

A banking Trojan first spotted in 2016 is still active, still stealing money, and now using a trusted file-management tool as cover to slip past security software on computers in Mexico.

4 min read
Dark web marketplace forum interface displayed on screens showing Android spyware tool listings and reseller advertisements, multiple vendor profiles and pricin
Threat Intelligence

BTMOB Android spyware splinters into a messy resale market

What started as a single Android remote-access tool for hire has fractured into resellers, source-code buyers and impersonators trading under the same name.

4 min read
A dark web marketplace interface displayed on multiple monitors, with malware builder tools and freshly packaged software packages arranged in an organized list
Threat Intelligence

Golden Chickens Malware Crew Returns With Four New Tools

The criminal group behind a long-running malware-as-a-service operation has rolled out fresh code, including a stripped-down loader and a browser password stealer.

4 min read
A computer screen showing a fake software update or security warning pop-up window overlaying a browser interface, with cursor hovering near a suspicious downlo
Threat Intelligence

Microsoft Warns of Two ACR Stealer Campaigns Stealing Credentials Through Fake Fixes

Between late April and mid-June 2026, two separate criminal campaigns used a trick called ClickFix to persuade workers to hand over browser passwords, session tokens, and business documents, with no software flaw required.

3 min read
Illustration: a darkened office monitor displaying a generic fake CAPTCHA verification page reflected in a glass surface
Threat Intelligence

ClickFix: The Fake Error Pop-Up That Tricks You Into Hacking Yourself

A scam that launched in 2024 has grown into a thriving criminal marketplace. Researchers say standard antivirus tools are missing it almost entirely, and they have built a new detection method to fill the gap.

4 min read
Illustration: an unbranded Android-
Threat Intelligence

RedWing: The Rent-a-Fraud Kit Turning Android Phones Into Bank Robberies

A new Android malware sold on Telegram lets almost anyone hijack a victim's phone, steal banking logins and grab the codes meant to keep accounts safe.

3 min read
Illustration: three different laptops arranged side by side on a dark desk, one Windows machine
Threat Intelligence

QuimaRAT: A New Rent-a-Malware Kit That Hits Windows, Mac and Linux

Researchers at LevelBlue say the Java-based remote access tool is being sold as a subscription, starting at $150 a month, and works across all three major desktop systems.

3 min read
© 2026 Threat Vectr