logo

Broken VECT 2.0 ransomware acts as a data wiper for large files

ID: f172d50f-7a3c-5d69-ae51-778e86ad9da6

STIX ID: report--f172d50f-7a3c-5d69-ae51-778e86ad9da6

Feed Name: Bleeping Computer

Threat Score
75/100

Date Published: 2026-04-28

Date Updated: 2026-04-28

Author: Bill Toulas

...
...

VECT 2.0 ransomware contains a critical implementation flaw in nonce handling for chunked encryption that causes the loss of nonces for all but the last chunk, effectively wiping large files (VM disks, databases, backups, and typical enterprise documents) across Windows, Linux, and ESXi; the operators are advertising on BreachForums and claim a partnership with TeamPCP to exploit supply-chain compromises.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.