Our researchers discovered this Bactor ransomware while browsing new file submissions to the VirusTotal website. Ransomware is a type of malware that encrypts data and demands a ransom for the decryption. On our testing system, Bactor encrypted files and added a ".bactor" extension to their filen
The "Emirates First Class Subscription" scam refers to fake Emirates airline webpages that target personally identifiable and finance-related data. The lure is membership for ten First Class flights at an incredibly low cost. It must be stressed that this phishing scam is not associated with the a
Our examination of the "Interactive Brokers - Renewal of W-8BEN Form Required" email revealed that it is fake. Presented as an "official notification" from Interactive Brokers, this message claims that the recipient must renew their W-8BEN form to comply with US tax regulations. It must be emphas
Our inspection of unperfuncone.co[.]in has shown that the purpose of this web page is to obtain permission to send notifications. However, this site uses a deceptive method to trick visitors into agreeing to get its notifications. Thus, unperfuncone.co[.]in should not be trusted and should be avoi
After inspecting this "Changes In The cPanel Webmail Server" email, we determined that it is fake. This phishing message urges the recipient to verify their email account to prevent its deletion. The goal is to deceive users into revealing their email account log-in credentials. It must be emphasi
Landfall is Android spyware targeting Samsung Galaxy devices (mainly in the Middle East). It is capable of recording audio, tracking location, and accessing photos, contacts, and call logs. The malware spreads via malicious DNG image files by exploiting a vulnerability in Samsung's image processin
We have tested the malware and found that it is ransomware. Our team has discovered Zarok while inspecting samples uploaded to VirusTotal. Upon execution, Zarok encrypts files and appends four random characters to their filenames (e.g., ".ps8v"). For instance, it renames "1.jpg" to "1.jpg.ps8v" an
We have examined the email and determined that it is a phishing attempt. The fraudulent message poses as a "service update notification". The scammers behind it seek to trick recipients into opening a deceptive page and entering personal details. This and similar scams should be ignored to avoid t
Our analysis shows that this is a phishing email disguised as a notification from the email service provider. It is used to trick recipients into opening a fake website and entering personal information on it. Falling for this scam can lead to account hijacking and possibly other negative outcomes
We have inspected savixnero.co[.]in and discovered that it is designed to display deceptive content to trick visitors into allowing it to show notifications. If permitted, savixnero.co[.]in can deliver fake warnings and other misleading messages. Users should avoid visiting this page. Once