Step-by-Step Malware Removal Instructions

Security Review Requested Email Scam
Phishing/Scam

Security Review Requested Email Scam

We have examined this email and concluded that it is a phishing scam. The message is disguised as a security notification urging recipients to review their account activity, but the link leads to a fake login page designed to steal email credentials. This email should be ignored. The "Secu

Your Accountant Left You A Voicemail Email Scam
Phishing/Scam

Your Accountant Left You A Voicemail Email Scam

We have inspected this email and determined it is a phishing scam. It is disguised as a Microsoft 365 voicemail notification, falsely claiming the recipient's accountant left a recorded message. The goal is to trick recipients into clicking a link that leads to a fake login page designed to steal

Messages Delayed Due To A Server Error Email Scam
Phishing/Scam

Messages Delayed Due To A Server Error Email Scam

We have examined this email and determined it is a phishing scam. It poses as an automated notification from the recipient's email system administrator, falsely warning that incoming messages have been delayed due to a server error. Its goal is to lure recipients into entering their email login cr

Microsoft Office 365 Email Account Will Expire Scam
Phishing/Scam

Microsoft Office 365 Email Account Will Expire Scam

We have examined this email and determined that it is a phishing scam. The message falsely claims that the recipient's Microsoft email account is about to expire and must be reactivated immediately. Clicking the button leads to a fake login page that harvests email credentials. This email should b

KIMO Ransomware
Ransomware

KIMO Ransomware

KIMO is ransomware our researchers discovered while analyzing new malware samples submitted to VirusTotal. It encrypts files using AES-256-CTR and appends the .KIMO extension to every file it locks. On our test machine, this ransomware encrypted files and appended the .KIMO extension to their fil

KarryTech Ransomware
Ransomware

KarryTech Ransomware

KarryTech is ransomware that our researchers discovered while examining new file submissions on VirusTotal. It encrypts files stored on the victim's machine and demands payment in exchange for a decryption tool. On our test machine, KarryTech appended each encrypted filename with a unique victim

Betelgeuse Ransomware
Ransomware

Betelgeuse Ransomware

Betelgeuse is ransomware our team discovered during a routine inspection of new submissions to the VirusTotal website. It targets company networks, encrypts files, and demands payment in exchange for a decryption key. It also claims to exfiltrate sensitive data before encryption, threatening to re

Verify Your Email Server Account Scam
Phishing/Scam

Verify Your Email Server Account Scam

We have inspected this email and determined it is a phishing scam. The message impersonates a generic email server verification notice and directs recipients to a fraudulent website built to steal their login credentials. It should be ignored and deleted without interacting with any of its links.

MAJINAHANASHI Ransomware
Ransomware

MAJINAHANASHI Ransomware

MAJINAHANASHI is ransomware our researchers discovered while examining new malware samples submitted to VirusTotal. It encrypts files, appends the .majin extension to their names, and drops a ransom note in a text file named README.txt. The attackers also claim to have stolen a copy of the victim'

Fake Xeno Malware
Trojan

Fake Xeno Malware

Fake Xeno is a multi-stage trojan that delivers a combined information stealer and Remote Access Trojan (RAT). It is disguised as a "Xeno" Roblox script executor - a cheat tool promoted through gaming forums and Discord servers. As documented by Bitdefender, the malware (also identified as "Power