Vect

☆ pin

Also known as VECT

Reports

First seen

Apr 28, 2026

Last seen

Jul 2, 2026

Motivation

Financial

Relationships

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Sectors

Technology ×1 Other ×1

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×4T1021.002 Remote Services: SMB/Windows Admin Shares ×3T1078 Valid Accounts ×2T1133 External Remote Services ×2T1003 OS Credential Dumping ×2T1110 Brute Force ×2T1021.001 Remote Services: Remote Desktop Protocol ×2T1562.001 Impair Defenses: Disable or Modify Tools ×2T1041 Exfiltration Over C2 Channel ×1T1566.002 Phishing: Spearphishing Link ×1T1053 Scheduled Task/Job ×1T1562 Impair Defenses ×1

Indicators

filename ×14cve ×2domain ×2ip_v4 ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2024-40766 (exploited)CVE-2024-47575 (exploited)CVE-2024-50383 (exploited)CVE-2025-55182 (exploited)CVE-2025-5777 (exploited)

Recent reports

Critical

Vect

Relationships

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Ransomware Groups Exploit Citrix Bleed 2, BYOVD Techniques, and Supply Chain Credentials

Vect and TeamPCP partner for ransomware campaigns targeting supply chain

State of ransomware in 2026: post-quantum cryptography, encryptionless extortion, and industrialized access brokers

VECT 2.0 Ransomware: Critical Encryption Flaw Renders Files Unrecoverable