KIMO is ransomware our researchers discovered while analyzing new malware samples submitted to VirusTotal. It encrypts files using AES-256-CTR and appends the .KIMO extension to every file it locks. On our test machine, this ransomware encrypted files and appended the .KIMO extension to their fil
KarryTech is ransomware that our researchers discovered while examining new file submissions on VirusTotal. It encrypts files stored on the victim's machine and demands payment in exchange for a decryption tool. On our test machine, KarryTech appended each encrypted filename with a unique victim
Betelgeuse is ransomware our team discovered during a routine inspection of new submissions to the VirusTotal website. It targets company networks, encrypts files, and demands payment in exchange for a decryption key. It also claims to exfiltrate sensitive data before encryption, threatening to re
We have inspected this email and determined it is a phishing scam. The message impersonates a generic email server verification notice and directs recipients to a fraudulent website built to steal their login credentials. It should be ignored and deleted without interacting with any of its links.
MAJINAHANASHI is ransomware our researchers discovered while examining new malware samples submitted to VirusTotal. It encrypts files, appends the .majin extension to their names, and drops a ransom note in a text file named README.txt. The attackers also claim to have stolen a copy of the victim'
Fake Xeno is a multi-stage trojan that delivers a combined information stealer and Remote Access Trojan (RAT). It is disguised as a "Xeno" Roblox script executor - a cheat tool promoted through gaming forums and Discord servers. As documented by Bitdefender, the malware (also identified as "Power
We examined this email and determined it is a scam. The message impersonates Citibank International PLC and falsely claims the recipient has an $850,000,000 compensation fund waiting for transfer. There is no such fund. The scammers behind it seek to harvest personal details and, over time, extrac
We have examined this email and determined it is a phishing scam. It masquerades as an urgent security notice from an email service provider, pressuring recipients into clicking a link that leads to a fake login page. Anyone who submits their credentials on that page hands them directly to the sca
We examined this email and determined it is a phishing scam. The message poses as a billing reminder and uses an HTML file attachment that, when opened, displays a fake Microsoft login page designed to steal account credentials. The email should be ignored and the attachment deleted without openin
We have examined this email and determined it is a phishing scam. It poses as an automated system notice from an email service provider, falsely claiming that the recipient's mail account requires an update or it will be suspended. The goal is to trick users into handing over their email login cre