SnakeBiteAgent is a Remote Access Trojan (RAT) discovered by ANY.RUN. It hands attackers control over an infected Windows computer and bundles password theft, banking fraud, cryptocurrency theft, and live surveillance into a single tool. What makes this RAT unusual is that it does not stay comple
Our research team found olsi5[.]xyz while investigating suspicious websites. After examining this rogue page, we learned that it uses a fake McAfee Safety Warning scam to trick visitors into enabling browser notifications. If permission is granted, olsi5[.]xyz sends unwanted advertisements directl
PackClient is a Remote Access Trojan (RAT) marketed through Telegram channels and deployed by a Chinese-speaking cybercriminal group tracked as TA4922. It gives attackers full remote control over compromised computers and supports over 60 remote commands. According to research published by Proofp
We have examined this email and determined it is a phishing scam. The message is crafted to resemble a legitimate business procurement request attributed to ExxonMobil. In reality, the HTML attachment it carries opens a fake email login form on the victim's device to steal credentials. This email
We have examined this email and concluded that it is a scam. The message poses as a payment notification containing an attached PDF receipt and tricks recipients into clicking a download link. That link leads to a phishing page designed to steal login credentials. This email should be deleted with
We have examined this email and determined it is a phishing scam. The message is disguised as a wire transfer notification from GreenState Credit Union and attempts to trick recipients into visiting a fraudulent website designed to steal their email account credentials. This email should be ignore
We have examined this email and concluded that it is a scam. It is designed to appear as an official billing notice from LinkedIn Corporation, falsely claiming the recipient has an outstanding invoice that requires payment. Recipients should disregard this message entirely to avoid falling victim
We have inspected this email and found that it is a phishing scam disguised as an official notice from "Webmail Optimum" and "CPanel Webmail." The message falsely claims that terms and conditions have been updated and pressures recipients to confirm their agreement via a provided link. Clicking th
After inspecting this email, we determined that it is malspam. The message poses as a vendor payment notification from Intuit QuickBooks and contains a button that redirects recipients to a fake website, which silently downloads a malicious file. This fraudulent email should be ignored and deleted
Fiasco Ransomware is ransomware that our research team found while inspecting new submissions to VirusTotal. It encrypts files, appends the ".secure" extension to their filenames, and drops a ransom note. The attackers also claim to steal sensitive data before encryption and threaten to publish it