logo

VexTrio’s Origin Story: From Spam to Scam to Adtech

ID: 10e28813-0f7c-519b-bb15-d5ed16f3774c

STIX ID: report--10e28813-0f7c-519b-bb15-d5ed16f3774c

Feed Name: Infoblox Threat Intel Blog

Threat Score
75/100

Date Published: 2025-08-06

Date Updated: 2026-04-28

Author: Infoblox Threat Intel

...
...

Infoblox Threat Intel profiles “VexTrio,” an organized criminal adtech enterprise (merger of Italian and Eastern European groups) operating affiliate networks (Los Pollos, TacoLoco, Adtrafico) and a traffic distribution system (TDS) that uses smartlinks, fake CAPTCHAs, push-notification monetization, and blank credit-card offers to funnel users from compromised sites and spam into large-scale scams and fraudulent subscriptions; the report enumerates linked companies, key individuals, hosting/DNS infrastructure, and open-source evidence of active abuse and monetization at scale.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.