NodeRabbit is a Remote Access Trojan (RAT) written in Node.js. It lets attackers secretly run commands, manage files, collect information about the device and network, and load additional code on infected computers. The malware is cross-platform and works on Windows, Linux, and macOS. Kaspersky r
We have examined this email and determined it is a phishing scam. The message is disguised as a legitimate business purchase order and carries an HTML file attachment. Opening the attachment reveals a fake Adobe-locked document interface designed to steal the recipient's email password. This email
We have inspected this email and determined that it is malspam. The message impersonates official correspondence from Absa bank to trick recipients into opening an attached PDF file. That PDF contains a link which downloads a malicious script designed to inject malware onto the victim's device. Th
Overbridgenet.com is a domain contacted in the background by an adware-type browser extension. We analyzed the campaign after it was documented by Qi'anxin Threat Intelligence Center, which named the extension responsible "Ghost Extension". The extension adds sponsored shopping results to Google
We inspected this page and found that it runs a fabricated Avast alert built to frighten visitors into buying antivirus software through an affiliate link. The scan results, the virus names, and the expiry date shown on the page are all invented. Avast is a real security company and has no connect
We have inspected this email and determined that it is a phishing scam. The message is disguised as an automated notification from an email service provider, falsely warning the recipient that their mailbox storage is nearly full. This email should be ignored to avoid handing login credentials ove
Our team has inspected this email and concluded it is malspam. The message poses as a business communication from a purchasing manager, claiming to include a PDF attachment with proposed contract revisions. Its true purpose is to deliver malware through a multi-stage infection chain hidden inside
We have examined this email and determined it is a phishing scam. It is disguised as a payment notification from an "Accounts Department" and instructs recipients to open attached PDF files - which lead to a fraudulent website designed to steal email login credentials. This email should be ignored
We investigated Smart Search and found that it is a browser extension with the traits of a browser hijacker. Once installed, it modifies browser settings to promote smartersearches.net, a fake search engine. Smart Search markets itself as a multi-language search tool. In practice, smartersearches
We have examined this email and determined that it is a phishing message. It claims that a technical fault has stopped twelve emails from reaching the recipient's inbox and urges them to release the messages by clicking a button. The link leads to a fake sign-in page built to harvest email account