Skip to main content
Ransomware Group

Vect

VECT is a RaaS group that launched its affiliate program in December 2025 with a five-tier revenue-sharing model and a formal partnership with BreachForums; its VECT 2.0 payload contains a critical encryption flaw that irreversibly destroys files larger than 128 KB rather than encrypting them.

Known victims25

Threat level

MEDIUM

Get an alert if one of your domains is named on a ransomware leak site.

Monitor your domainsFree account · up to 5 monitored targets

Known infrastructure

The following Tor hidden services have been associated with this group:

  • breach5yz2b5lepmq4gaqwcon3jippw3bislhvvdavem5git55sy2nid.onion
  • VECT RANSOMWARE // DATA ARCHIVE
  • VECT RANSOMWARE // DATA ARCHIVE

These sites are malicious. Open them only from an isolated environment.

0

Check if you’re affected

Look up your domain to see whether it appears on Vect’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request