Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Vect
As of Oct 19, 2026, Vect has listed 22 confirmed victims on its leak site since Oct 5, 2025, 0.1% of all victims tracked by Brandefense. Its most targeted country is Brazil (22.7% of its victims) and its most targeted sector is Technology.
VECT is a RaaS group that launched its affiliate program in December 2025 with a five-tier revenue-sharing model and a formal partnership with BreachForums; its VECT 2.0 payload contains a critical encryption flaw that irreversibly destroys files larger than 128 KB rather than encrypting them.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 22
- Rank By Victims
- #166
- Last Leak-Site Post
- Apr 15, 2026
- Top Country
- Brazil
- Top Sector
- Technology
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 2 |
| February 2026 | 16 |
| March 2026 | 1 |
| April 2026 | 2 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| October 2025 | 1 |
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 2 |
| February 2026 | 16 |
| March 2026 | 1 |
| April 2026 | 2 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Vect Victims.
Search all 22 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP) spglobal.com | USUnited States | Financial Services | Not stated | |
| guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) guesty.com | ILIsrael | Technology | 700 GB | |
| Verlat Energy verlatenergy.com | PEPeru | Energy and Utilities | Not stated | |
| USHA International Limited usha.com | INIndia | Manufacturing | Not stated | |
| keliweb keliweb.it | ITItaly | Technology | 200 GB | |
| Casas del Mediterraneo casasdelmediterraneo.com | ESSpain | Construction | 200 GB |
How They Operate.
Vect's threat actor profile lists 38 ATT&CK techniques, 10 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Vect Targets.
Sectors
History.
First confirmed victim listed on its leak site
First seen in Brandefense data
Busiest month on record: 16 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.