We analyzed this page and determined that it is a technical support scam. It uses fake Windows security warnings to frighten visitors into calling a fraudulent support number. Microsoft Corporation and Windows have no connection to this scheme whatsoever. The page at rovuwogipi.z7.web.core
We have inspected this email and found it to be a phishing scam. It falsely claims that a deactivation request was submitted for the recipient's webmail account, then urges them to click a button to cancel it. That button links to a fraudulent website designed to steal email login credentials. Thi
We examined this email and determined it is a phishing scam. It impersonates Wells Fargo and falsely informs recipients that a disputed payment has been credited to their account. The message leads to a fake Wells Fargo login page designed to steal banking credentials. This email should be ignored
We have inspected this email and determined it is malspam. The message impersonates the Internal Revenue Service and claims the recipient's recent tax filing requires additional identity verification. Clicking the link inside leads to a malicious website that automatically downloads a trojanized r
After examining this email, we concluded it is a phishing scam. The message poses as an automated server notification claiming the recipient's email account has a POP3 error requiring immediate verification. Its purpose is to trick recipients into entering their email login credentials on a fraudu
Twitch Enhanced Viewer | JeetBot malicious extension is marketed as a browser extension that enhances the Twitch viewing experience. It promises features such as 1080p/2K streaming, ad blocking, and automatic channel point collection. According to research published by Socket, this extension secre
Sword is a piece of ransomware that our researchers came across while inspecting new samples submitted to VirusTotal. It encrypts files, drops 20 copies of a text-based ransom note on the desktop, and locks the screen with a full-screen message. The lock screen comes back roughly 10 seconds after
Vricpe is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's device and demands payment in exchange for the decryption key. On our test machine, Vricpe entirely replaced each file's original name wit
We have examined this email and determined it is a phishing scam. Despite claiming to be part of a corporate security-awareness exercise, the message is designed to trick recipients into entering their email login credentials on a fraudulent webmail login page. The email should be ignored and dele
We have examined this email and determined it is a phishing scam. It is disguised as an automated alert from an email service provider, falsely claiming that the recipient's mailbox has not been synchronized and requires an update. This email should be ignored - clicking the link within it risks e