We have examined this email and concluded that it is a phishing scam. It is disguised as a routine business communication from a contact sharing sample files through WeTransfer. The link inside leads to a fraudulent website built to steal email login credentials. This email should be ignored and d
Our team has inspected this email and determined it is malspam. The message poses as an EFT/ACH payment settlement notification to trick recipients into clicking a link. That link leads to a fraudulent website that downloads a malicious file onto the visitor's computer. The email should be ignored
We have inspected this email and determined that it is a phishing scam. The message is disguised as an urgent account-closure notice from an email service provider and urges recipients to click a verification link. That link leads to a fraudulent login page designed to steal email credentials. Thi
During our examination of sharex-network[.]live, we found that this page closely imitates the legitimate ShareX platform (sharex.network) and promotes a fake cryptocurrency airdrop. Visitors who click "Claim Your Airdrop" are presented with a wallet connection dialog designed to activate a cryptoc
While examining suspicious websites, our researchers identified stack-deckcoin[.]com, a fraudulent page promoting a fake XRP community reward. The site falsely claims visitors are eligible to claim 150 XRP tokens for free, but its actual purpose is to steal cryptocurrency by tricking users into co
Citrus Ransomware is ransomware our research team discovered while examining new file submissions to the VirusTotal website. It encrypts victims' files to make them inaccessible and demands payment in exchange for a decryption tool. Beyond encrypting files, Citrus ransomware changes the desktop w
After examining this email, we concluded it is a phishing scam. The message poses as an automated notification from an email service provider, warning of a temporary delivery problem and urging the recipient to click a link to become a "secured sender." The goal is to steal email login credentials
We have inspected this email and found that it is a phishing scam. The message is disguised as an urgent notification from cPanel, falsely claiming that the recipient's email account is about to be shut down due to a security-related issue. It is designed to trick recipients into entering their em
AgtaBackup RAT is a Remote Access Trojan (RAT) built on the .NET 8.0 platform. Once installed, it gives attackers complete, hidden control over the infected computer and can also steal saved passwords, cookies, and other sensitive data. According to research published by Unit 42 (Palo Alto Networ
AvisLoader is a Windows malware loader - a program whose main job is to get a foothold on a computer and then download and run other malicious software on it. It was described by Varonis Threat Labs after researchers came across an exposed staging server holding the loader, its helper tools, a fak