logo

Meet VexTrio, a network of 70K hijacked websites crooks use to sling malware, fraud

ID: c89af46f-f86c-5683-823e-ded2880f5ef8

STIX ID: report--c89af46f-f86c-5683-823e-ded2880f5ef8

Feed Name: The Register (Security)

Threat Score
75/100

Date Published: 2024-02-10

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

VexTrio is a long-running traffic distribution operation that has hijacked roughly 70,000 legitimate websites to funnel visitors to malware, phishing pages, and scams; researchers (Infoblox, Check Point) link the network to distribution of payloads such as SocGholish and ClearFake, an affiliate-based monetization model, and observable indicators of compromise across customer networks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.