Skip to content
Threat Feed
Subscribe

Product

Trivy

2 briefs RSS
high threat

Vect and TeamPCP Partner for Ransomware Campaigns Exploiting Supply Chain Compromises

The threat groups Vect and TeamPCP have formally partnered since March 2026 to conduct widespread ransomware deployment and extortion campaigns by leveraging TeamPCP's credential harvesting and data theft capabilities, often initiated through supply chain compromises involving poisoned software updates and exploitation of critical vulnerabilities like CVE-2025-55182, leading to significant data exfiltration and encrypted systems across multiple sectors.

React Server Components +10 Vect +1 ransomware supply-chain-attack data-theft credential-access extortion python github pypi
1r 10t 1i updated
high threat

VECT Ransomware Destroys Files Due to Encryption Flaw

VECT 2.0 ransomware, a RaaS offering, permanently destroys large files due to an encryption flaw, discarding decryption nonces for files above 128 KB, rendering them unrecoverable and effectively acting as a wiper; it uses raw ChaCha20-IETF with no authentication.

ESXi +3 TeamPCP ransomware wiper raas
2r 1t