Fake apps from VexTrio on Apple and Google stores mislead users, steal data, and charge hidden fees.

Learn how VexTrio Viper adapts to industry reporting and about the role of Infoblox Threat Intel in identifying and responding to these changes. Despite their adaptations, VexTrio Viper is still detec...

A massive cybercrime network known as "VexTrio" is using thousands of compromised WordPress sites to funnel traffic through a complex redirection scheme.

We reveal how VexTrio has profited from spam and scams for decades, gaining persistent access to victims through fake captchas and browser notifications.

Infoblox reveals VexTrio’s sprawling adtech scam network affecting thousands globally via compromised sites.

Infoblox reveals VexTrio’s sprawling adtech scam network affecting thousands globally via compromised sites.

A malware campaign that was injecting malicious JavaScript code into compromised WordPress sites to redirect site visitors to VexTrio domains has since switched to server-side Redirects and using DNS ...

Massive "Criminal Affiliate Program" Exposed: VexTrio Brokers Traffic for 60+ Cybercriminals, Including ClearFake & SocGholish.

Infoblox reveals VexTrio’s sprawling adtech scam network affecting thousands globally via compromised sites.

Some useful indicators of compromise right here

Fake apps from VexTrio on Apple and Google stores mislead users, steal data, and charge hidden fees.

A massive cybercrime network known as "VexTrio" is using thousands of compromised WordPress sites to funnel traffic through a complex redirection scheme.

Infoblox reveals VexTrio’s sprawling adtech scam network affecting thousands globally via compromised sites.

A previously unknown traffic distribution system (TDS) named 'VexTrio' has been active since at least 2017, aiding 60 affiliates in their cybercrime operations through a massive network of 70,000 site...

The investigation is based on our previous research on Doppelganger's infrastructure and focuses on the open question regarding the use of hidden front-end-proxies to display different content dependi...

This week, we are joined by ⁠Dr. Renée Burton⁠, VP of ⁠Infoblox⁠ Threat Intel, who is discussing their work on VexTrio, a notorious traffic distribution system (TDS) involved in digital fraud. The VexTrio investigation uncovers a massive global ad fraud and scam operation powered by just 250 virtual machines, tying it directly to named individuals and shell companies across Europe. The research exposes VexTrio’s full criminal supply chain—including fake apps, dating scams, affiliate networks, and payment processors—alongside a powerful CDN infrastructure ranked among the world’s top 10k domains. It also calls on the adtech industry to take accountability for enabling and sustaining such widespread abuse.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

The sun has come for us, in the US. We escaped the desert only to trudge back into summer heat. But all is not lost - some things are looking better, and voluminous research has emerged from Hacker Su...