RIED Ransomware is ransomware that we discovered while examining new file submissions on VirusTotal. It belongs to the Makop ransomware family. Like other members of this group, it encrypts files, adds a distinctive extension to their filenames, drops a ransom note, and changes the desktop wallpap
We have examined this email and determined it is a phishing scam. The message impersonates DocuSign, falsely claiming the recipient has a contract document waiting for their review and signature. Its purpose is to lead victims to a fraudulent page that harvests email login credentials. Recipients
We have examined this email and determined it is a phishing scam. The message falsely claims that a security issue has been found in the recipient's mailbox and urges them to validate their account. Its purpose is to steal email login credentials, and it should be deleted without interacting with
We have examined this email and determined that it is a phishing scam. The message is designed to appear as a legitimate storage warning from an email service provider. Its goal is to trick recipients into entering their login credentials on a fraudulent website. This email should be ignored.
We have examined this email and determined that it is a scam. The message falsely claims to be an official notification from the International Monetary Fund (IMF), telling the recipient they have been selected to receive a US$3,000,000 international award. This email is designed to trick people in
RatHat is an Android Remote Access Trojan (RAT) linked to threat actors believed to be operating in China. According to research published by Zimperium's zLabs team, it combines AI-driven automation, hardware-level keylogging, and sophisticated anti-analysis protections to steal banking credential
During a routine investigation, our researchers discovered homeinlook.com - a fake search engine that is promoted through browser hijackers and other unwanted applications. It cannot generate search results on its own, instead routing users through an intermediate site before eventually landing el
We have examined this email and determined it is a phishing scam. It poses as a routine notification from a webmail service provider, claiming a new version of the recipient's webmail has been released. The goal is to lure recipients into a fake login page where their email credentials are stolen.
We have examined this email and concluded that it is a phishing scam. The message is disguised as a routine wire transfer payment notification, urging recipients to click a button and review the supposed transaction details. Its actual purpose is to steal email account login credentials. This emai
We have examined this email and determined that it is a phishing scam posing as a security alert from an email service provider. The message falsely warns that an unrecognized device was added to the recipient's account and urges them to verify their identity via a provided link. That link leads t