threat actor · Origin not attributed
Vect
1 CVE exploited (1 in CISA KEV)
The strips, in order: the CVEs it is reported to exploit by weakness class and by vendor, the techniques ATT&CK says it uses by tactic, its malware and tools, then who it targets. Each square is one record.
Open Vect's actor pageVect is a ransomware group reported to have a structured affiliate program and to conduct double extortion. SOCRadar described its use of compromised supply chains and multiple attack vectors; Infosecurity Magazine reported its partnership with TeamPCP, while SANS reported it exploited CVE-2026-33634. No origin attribution is on record.
Source: CyberSIXT summary, 14 November 2026. Written by CyberSIXT's model from CyberSIXT's own article summaries and records, and checked against them; read the articles before relying on it.
- Origin
- Not attributed
- On record in
- CyberSIXT
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.