After examining this email, we determined it is a phishing scam. It is disguised as a legitimate business request for quotation from a procurement officer, urging the recipient to open an attached file that appears to be a spreadsheet. The attachment is in fact an HTML file that, when opened, pres
We have examined this email and determined it is a phishing scam. It poses as an automated account notice from a generic email message center and urges the recipient to open an attached HTML file. That file, when opened in a browser, presents a fake login page designed to steal email credentials.
We have examined this email and determined it is a scam. It impersonates Norton and falsely claims the recipient's security subscription has expired, using fabricated threat warnings to create urgency. The main variant leads to a fake login page designed to steal email account credentials. This em
We have examined this email and determined that it is a scam. It is designed to look like a legitimate package delivery notification, claiming that a shipment could not be delivered and must be rescheduled. The email is a phishing attempt aimed at tricking recipients into handing over personal inf
We have examined this email and determined it is a phishing scam. It is disguised as an official notification from a webmail service, falsely claiming that a recent platform update requires the recipient to confirm their email address. The intent is to trick people into entering their login creden
We have examined this email and determined it is a phishing scam impersonating DHL Express. The message falsely claims a shipment has been assigned to the recipient and urges them to open an attached HTML file to review shipping documents. The attachment is fraudulent and designed to steal the rec
We have examined this email and determined it is a phishing scam. The message is disguised as a document-sharing notification from pdfFiller, claiming that a contact has shared a file with the recipient. It leads to a fraudulent website designed to steal email account login credentials. This email
Our research team came across infolinkdusk[.]co.in while examining suspicious websites. After looking into this page, we found that it uses a fake CAPTCHA test to trick visitors into allowing browser notifications. Once permitted, it delivers fake security alerts and can redirect users to other (l
Nexorbytecove[.]com is a rogue webpage that promotes browser notification spam and runs a fake McAfee security alert to scare visitors. Our analysis showed that, if permitted, the page delivers fake virus warnings designed to push users toward scams and other untrustworthy content. Most visitors l
Cocaware is a ransomware-type program that locks victims' files and demands payment for their recovery. It encrypts data, appends the .coca extension to each filename, and leaves a ransom note in a text file named LEEME.txt in every folder containing encrypted data. Files affected by this ransomw