ThreatCluster

Phishing Campaign Exploits Vercel Hosting for Remote Access Tools

First seen 26 Jan 2026, 17:54 UTC GbhackersCybersecuritynews 53

Article Content

Browse articles
ThreatCluster

A phishing campaign has been exploiting Vercel's hosting platform since November 2025 to distribute remote access tools. The attackers utilize social engineering tactics, sending emails themed around financial matters to trick victims into downloading malware. This method leverages the trust associated with the Vercel domain, making detection difficult for traditional security measures.