MSP cybersecurity news digest, June 24, 2025

A multi-country intelligence summary details several active and sophisticated incidents: the Shadow Vector campaign using malicious SVGs to deliver RATs and in-memory loaders to Colombian users; BlueNoroff leveraging deepfake Zoom calls to install macOS malware; ransomware attacks and data exfiltration impacting Chain IQ and MSP Vertel; breaches at Scania and Episource exposing sensitive customer and personal health data; and a Silver Fox phishing campaign in Taiwan distributing HoldingHands and Gh0stCringe RATs—collectively illustrating cross-regional, multi-stage attacks that weaponize social engineering, cloud services, and stealthy runtime techniques.