Our team has analysed the page (event-pyra[.]fun) and concluded that it imitates the original PYRA website, pyrachain.io. The fake site promotes a fake cryptocurrency giveaway, an airdrop to lure visitors into taking steps that could lead to permanent cryptocurrency loss. Thus, it is highly advisa

We have inspected search.ansiblealgorithm.com and found that it is a fake search engine because it does not generate results. Moreover, it may collect various data. It is also important to mention that fake search engines are often associated with browser hijackers. Users should not trust search.a

After reviewing the website (claim-goyim.pages[.]dev), we identified it as a scam. It falsely offers visitors the opportunity to join a cryptocurrency airdrop. The attackers behind this site aim to steal funds from users' crypto wallets, meaning that engaging with it could lead to serious financia

Xillen is an information stealer often distributed through other malware, such as Amadey. Once executed on the device, it gathers various information and sends it to cybercriminals. Having the system infected with Xillen can result in issues such as identity theft and financial loss. Thus, if dete

We have tested the malware and found that it is ransomware belonging to the MedusaLocker family. Once executed, Venere encrypts files and appends the ".Venere1" extension (the included number might vary). For example, it renames "1.jpg" to "1.jpg.Venere1", "2.png" to "2.png.Venere1", and so forth.

Our team has tested markedoneofthe.com and determined that although it is presented as a search engine, it does not generate results and can direct users to untrustworthy websites. Thus, we classified it as a fake search engine. Moreover, markedoneofthe.com may be associated with browser hijackers

We have reviewed the email and determined that it is a phishing message disguised as a security notification from American Express. It is created to appear urgent and important to trick recipients into opening a fake website and entering personal information. This and similar scams should be ignor

ShadyPanda is a family of malicious browser extensions responsible for over four million infections. These extensions are connected by overlapping code, identical obfuscation, and shared infrastructure. Some operated as advertised and remained dormant for years before an update introduced maliciou

PC App Store is a legitimate application that allows easy access to various software vendors. However, while this is a genuine piece of software – there are no guarantees that the content advertised through it will not have undesirable features, such as data tracking. Furthermore, PC App Store

Our analysis has determined that gousoroil[.]lat is a fraudulent website, created to mimic the original United States Oil Reserve (USOR) site, usor.tech. It is used by scammers to trick visitors into taking actions that can lead to cryptocurrency theft. This fraudulent page should be avoided and c

February 02, 2026

ShinyHunters and associated threat clusters have significantly refined their tactics for breaching enterprise cloud environments, shifting from opportunistic data theft to highly coordinated campaigns that exploit human trust and centralized identity infrastructure. Recent threat intelligence from

January 29, 2026

In late 2025 and early 2026, cybersecurity researchers observed a significant shift in how sophisticated threat actors establish initial access and maintain resilient command infrastructure. At the center of this evolution is a malware strain, known as Tsundere Bot, which has rapidly emerged as a mo

January 27, 2026

In recent months, cybersecurity researchers have documented a marked escalation in the sophistication and ambition of cyberattacks linked to North Korean state–aligned threat actors. This includes those attributed to the Konni cluster and its close ties with APT37. These campaigns highlight a wid

January 22, 2026

In early 2026, security researchers discovered a set of dangerous, wide-reaching vulnerabilities in a widely used open-source AI development framework called Chainlit. These vulnerabilities, collectively dubbed ChainLeak, threatened to expose sensitive data and even allow attackers to breach cloud e

January 20, 2026

In early January 2026, cybersecurity researchers revealed a serious vulnerability in Microsoft Copilot Personal. This consumer-focused AI assistant is integrated into Windows, the Edge browser, and other applications. The vulnerability, called Reprompt, let attackers bypass built-in safety protectio