Scworld Emergence of Vect RaaS Operation Targeting Organizations in Brazil and South Africa
Article Content
Browse articles 
The newly identified Vect ransomware-as-a-service (RaaS) operation has compromised organizations in Brazil and South Africa. Launched in December 2025, Vect employs C++-based malware utilizing the ChaCha20-Poly1305 AEAD encryption algorithm and SafeMode execution to target Windows, Linux, and VMware ESXi systems.
Ask AI about this cluster
Answers cite the sources they use
Updated 227d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Conti in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Ransomware Groups Exploit PAN-OS Flaw, Target Critical Infrastructure Ransomware groups, including Qilin and INC, are exploiting a critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access. This flaw allows attackers to establish unauthorized VPN sessions, bypassing multifactor authentication controls. Since its disclosure… 
Japan Sanctions Garantex Amid Ongoing Ukraine Conflict On October 2, 2026, Japan sanctioned the Russian cryptocurrency exchange Garantex as part of a broader package targeting 33 entities and nine individuals linked to Russia due to the ongoing war in Ukraine. The sanctions include asset freezes and restrictions on payments and capital transactions, requiring government…