Our research team discovered cgre-defender[.]pro while investigating dubious websites. The page uses a fake CAPTCHA to trick visitors into agreeing to receive browser notifications. Once permission is granted, cgre-defender[.]pro delivers fake security alerts that can expose users to online threat
Our research team found the woonceome[.]com rogue page while investigating suspicious websites. After inspecting this webpage, we determined that it uses a fake human verification prompt to trick visitors into enabling browser notifications. If permitted, woonceome[.]com sends misleading security
Night Dragon RAT is a Remote Access Trojan targeting Android users. It was unveiled through a criminal Telegram channel on June 23, 2026, as a successor to an earlier Android malware framework known as Flying Eagle. According to research published by hunt.io, Night Dragon can steal financial crede
Flying Eagle RAT is an Android remote access trojan distributed as a source-code framework through criminal Telegram channels. It can capture keystrokes and payment credentials, record the device screen, access the camera, and deploy phishing overlays targeting financial and government application
TONResolver is a Remote Access Trojan (RAT) written in JavaScript and run through the legitimate Node.js runtime. Once active, it opens a persistent encrypted connection to an attacker-controlled server and waits for instructions, giving operators the ability to execute code, retrieve files, and d
QuimaRAT is a Java-based Remote Access Trojan (RAT) sold to cybercriminals as a subscription service. This model, known as Malware-as-a-Service (MaaS), allows anyone who pays the fee to deploy the RAT against targets of their choosing. According to research published by LevelBlue's SpiderLabs tea
KansasGroup is ransomware our research team identified while analyzing new file submissions on VirusTotal. Like most ransomware, it encrypts files on the infected machine and demands payment in exchange for decryption. On our test machine, this ransomware appended the ".kansas4life" extension to
Own Ransomware is a ransomware-type program discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the infected device and demands payment in exchange for decryption. On our test machine, Own Ransomware appended each filename w
After inspecting this email, we determined that it is a phishing scam. It is disguised as a management portal notification claiming that a proposal evaluation has been completed and the recipient's review is required. The link inside leads to a fake email login page designed to steal account crede
msaRAT is a Remote Access Trojan (RAT) written in the Rust programming language, linked to the Chaos ransomware group. According to research published by Talos Intelligence, it uses an unusual "living off the browser" technique to keep its communications with the attacker's server hidden. Rather