logo

VexTrio Cybercrime Outfit Run by Legit Ad Tech Firms

ID: 95a28611-9254-5e3b-9754-95ca5a75b08c

STIX ID: report--95a28611-9254-5e3b-9754-95ca5a75b08c

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2025-08-06

Date Updated: 2026-04-21

Author: Rob Wright

...
...

Infoblox and partner researchers reveal VexTrio, a large-scale cybercrime operation that exploits compromised websites and commercial ad-tech firms (e.g., Los Pollos, AdsPro/AimedGlobal, TacoLoco) to run TDS-based redirection campaigns funneling victims to scams, exploit kits and malware; investigators mapped a complex network of shell companies and affiliates, identified tens of thousands of malicious domains (70,000+), and described sophisticated evasion and monetization techniques that make detection and disruption difficult.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.