After examining this email, we determined it is a phishing scam. The message poses as an automated security alert from cPanel, falsely claiming that a recent security breach triggered automatic two-factor authentication on the recipient's webmail account. The goal is to direct recipients to a fake
We have examined this email and concluded it is a scam. The message is designed to look like an urgent security alert from the recipient's own IT department, claiming their workstation has been infected with a trojan and their network access suspended. Rather than linking to a fake website, it dir
We have examined this email and concluded that it is a scam. The message is disguised as an automated maintenance alert from a fictitious mail service, urging recipients to access a fake "official mail portal." The scammers behind it aim to steal email account credentials from unsuspecting users.
We have inspected this email and determined it is a phishing scam. It poses as an official alert from the United States Postal Service regarding a POBOL PO Box membership and is designed to steal the recipient's email account login credentials. This email should be ignored. The email prese
We have examined this email and concluded that it is a phishing scam. The message is presented as a request to review a report and includes a link that supposedly opens a PDF document. In reality, the link leads to a fake sign-in page built to steal email account login credentials. This email shou
SAMURAI-SEC is ransomware that we found while examining new malware samples submitted to VirusTotal. It is based on the Chaos ransomware family. This malware encrypts files and demands payment for decryption. It also steals data before locking files, threatening to publish it unless the ransom is
We have examined this email and determined it is a phishing scam. The message impersonates DocuSign, falsely claiming that someone sent the recipient PDF documents to review and sign. The link leads to a fake login page designed to steal email account credentials. This message should be ignored.
ByteBane is ransomware that we discovered while examining new malware samples submitted to the VirusTotal website. It encrypts files, appends the .bytebane extension to their filenames, changes the desktop wallpaper, and drops a ransom note in a text file named README.txt. The ransomware also clai
MAJIN ransomware is ransomware our research team identified while examining new malware submissions on VirusTotal. It encrypts victims' files, exfiltrates sensitive data from the affected network, and threatens to publish stolen information publicly unless a ransom is paid. On our test machine, t
We have inspected this email and determined it is a phishing scam. It is disguised as an automated storage alert from cPanel Roundcube webmail, urging recipients to log in through a fraudulent link. Its purpose is to steal email login credentials. This email should be ignored and deleted without c