Description
Trojan.VexTrio is a JavaScript based traffic direction system active since 2017 that multiple criminal organizations use to redirect victims to various malicious locations. Its operators broker access to tens of thousands of compromised and registered domains, routing visitors to phishing pages, scam sites, and malware downloads while hiding the true destinations. Researchers describe it as the largest traffic distribution network of its kind, and its reach makes it a force multiplier for countless campaigns.
Stats
- First seen
- February 2024
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Document-HTML.Trojan.VexTrio |
| Script-JS.Trojan.VexTrio |