ThreatVectr
Tag

#malware

81 stories taggedmalware · page 4 of 6.

A cybercrime forum listing page for Dolphin X malware, displaying a scoring algorithm interface that ranks infected machines by financial value and net worth es
Threat Intelligence

Dolphin X: The New Malware That Uses AI to Pick Which Victims to Rob First

A remote access trojan sold on a cybercrime forum claims to score infected machines by their value, so criminals can go after the richest targets first.

4 min read
Portuguese bank statements and account records showing gradual unauthorized transfers, a computer screen displaying the same banking malware code that has remai
Threat Intelligence

A Six-Year-Old Brazilian Bank Fraud Tool Is Still Emptying Portuguese Accounts

Lampion has barely changed since 2019. It doesn't need to. Portugal keeps falling for it.

4 min read
A digital marketplace interface showing ransomware tools and attack kits available for subscription-based rental, displayed like a software-as-a-service storefr
Ransomware

What is ransomware-as-a-service? A plain-English guide

Ransomware-as-a-service lets criminals rent attack tools from developers, the same way businesses subscribe to software, making large-scale extortion attacks available to almost anyone.

5 min read
A cybercriminal's workspace with multiple monitors displaying calendar applications and email clients, showing how calendar entries contain encoded command inst
Threat Intelligence

HollowGraph Malware Hides Spy Commands Inside Microsoft 365 Calendar Entries

A newly identified piece of malware turns ordinary calendar appointments into a covert messaging system, letting criminals send instructions and steal files without ever touching a suspicious server.

3 min read
Illustration: a developer's dark wooden desk, glowing laptop screen showing an abstract green-on-black code repository
Threat Intelligence

Fake AI Tools on GitHub Are Hiding Malware, Researchers Find 7,600 Booby-Trapped Repos

A campaign called FakeGit is dressing up malicious code as AI helpers and developer tools to trick programmers into installing SmartLoader.

3 min read
Illustration: a dimly lit server rack in a small unmarked room, one door left ajar with light spilling into a corridor
Threat Intelligence

Careless malware crew leaves 1,048-file toolkit exposed on the open web

Rapid7 researchers grabbed the lot after the operators forgot to lock their delivery server. Inside: AI-written lures, dropper experiments and a live infostealer campaign hitting Windows users in Mexico.

3 min read
Illustration: a dimly lit office desk at night, a laptop screen glowing with a blurred calendar grid showing dates far
Threat Intelligence

HollowGraph Spies Hide Their Orders in Fake Calendar Events Dated 2050

A newly named espionage tool turns Microsoft 365 calendars into a secret mailbox, tucking instructions and stolen files into meetings set decades in the future.

3 min read
Illustration: a dimly lit developer workstation at night
Threat Intelligence

Seven booby-trapped npm packages hit Vite developers with blockchain-controlled malware

Researchers at Checkmarx say the ViteVenom campaign hides its command server across cryptocurrency networks, making it unusually hard to shut down.

3 min read
Illustration: a laptop screen showing an abstract national flag image rendered in soft focus
Threat Intelligence

North Korean Job-Interview Scam Hides Malware Inside Flag Images

Fake coding tests planted a four-stage stealer on developers' machines, with the payload smuggled inside SVG picture files.

3 min read
A Windows desktop displaying a folder of font files, one file highlighted with a suspicious icon, with malware detection warnings appearing in the system tray
Threat Intelligence

Malware Disguised as Font Files Targets Windows Users

A global phishing campaign active since March 2026 is hiding credential-stealing malware inside fake font files, and the evasion chain is getting harder to catch.

2 min read
Illustration: a laptop screen showing a fake browser error dialog with a blurred instruction to press keyboard keys
Threat Intelligence

TELEPUZ: The New Malware Hiding Behind Fake 'Fix This' Website Pop-ups

A modular info-stealer is spreading through booby-trapped websites that trick visitors into pasting malicious commands into their own computers.

3 min read
A MacBook screen displaying a convincing popup dialog asking for password entry, with the background showing a locked desktop state, while the user's hand hover
Threat Intelligence

ClickLock Stealer Tricks Mac Users Into Handing Over Their Own Passwords

A newly discovered piece of Mac malware skips the usual hacking tricks and simply persuades victims to run it themselves, then locks the screen until they surrender their passwords.

3 min read
Illustration: a laptop screen showing a generic software installer progress bar in a dim home office, warm desk lamp glow
Threat Intelligence

Russian Crew Hides Starland Backdoor Inside Fake Zoom and WebEx Installers

UAT-11795 is spiking popular software downloads with a credential-and-crypto stealer, and US users are the main target.

4 min read
Illustration: a glowing green terminal screen filled with cascading lines of package dependency text and vulnerability
Vulnerabilities

Two Popular Coding Tools Poisoned With Malware in Back-to-Back Supply Chain Attacks

Criminals hijacked developer credentials to slip malicious code into widely used JavaScript packages, putting any computer that installed them at serious risk.

3 min read
Illustration: a small metallic cryptocurrency hardware wallet plugged into a laptop USB port on a dark wooden desk
Threat Intelligence

OkoBot Malware Hijacks Ledger and Trezor Apps to Steal Crypto Recovery Phrases

A Windows malware framework active since April 2025 waits for victims to open their hardware wallet software, then fakes a prompt for the seed words that unlock everything.

4 min read
© 2026 Threat Vectr