Neutrino is ransomware our research team discovered while examining malware samples submitted to VirusTotal. It encrypts victims' files, replaces their filenames with random character strings, appends a .neutrino extension, and also claims to steal sensitive data from the targeted network. On our
We have examined this email and concluded that it is a phishing scam. The message is disguised as a notification from an e-signature service, falsely claiming that a business agreement has been signed by all parties and is ready to download. It directs recipients to a fraudulent login page designe
We have examined this email and determined it is a scam. It poses as an official notification from DHL Express, falsely claiming that import duty or tax fees must be paid before a shipment can be delivered. The goal is to trick recipients into submitting payment details to fraudsters. This email s
VOLTA Stealer (also tracked as VOLTA-AUTODOXER) is an information stealer for Windows that adds an unusual twist to standard data theft: after harvesting credentials and personal data from the infected device, it feeds the results to an AI language model and asks it to rank the victim by financial
PapRAT is a Remote Access Trojan (RAT) linked to BITTER, a suspected South Asian cyberespionage group active since at least 2013. Once deployed, it grants attackers full remote control over the infected computer. According to research by FortiGuard Labs, PapRAT has been used in a campaign targeti
OBSOFT is ransomware we discovered while examining new file submissions on the VirusTotal website. It encrypts data on infected systems, appends the .obsoft extension to filenames, and leaves a ransom note in a text file named READ_ME.txt. The note also claims that sensitive data was stolen from t
One Decryptor Ransomware is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files using AES-256 combined with RSA-2048 key wrapping, leaving victims unable to access their data without the private key held by the attack
We have examined this email and determined it is a phishing scam. It impersonates a web hosting provider, falsely warning recipients that they must update their account information to avoid losing access to their hosting plan. The link in the email leads to a fraudulent website designed to steal e
We have examined this email and determined that it is a scam. The message falsely presents itself as an official notification from Pfizer, claiming the recipient has been selected to receive a substantial monetary grant. It is an advance-fee fraud designed to extract personal information and, even
We have inspected this email and determined it is a phishing scam. The message poses as a Zoom audio message notification to trick recipients into clicking a link. That link leads to a fake login page designed to steal their email account credentials. This email should be ignored. The emai