After examining this email, we determined it is a phishing scam. The message poses as an official notification from a domain or email hosting service, falsely claiming that a deactivation request has been received for the recipient's email domain. Scammers use it to steal email account credentials
After examining this email, we determined it is a scam. The message is crafted to resemble an urgent billing notice from an antivirus and privacy protection service, falsely claiming that the recipient's subscription payment has repeatedly failed. It is designed to pressure people into providing p
We have examined this email and concluded that it is a scam. The message is crafted to appear as an official notice from the International Monetary Fund, claiming the recipient has been identified as a victim of internet fraud and is owed a large cash payout. The goal is to trick recipients into p
We have examined this email and determined it is a phishing scam. The message falsely claims the recipient's account has violated terms of service and that incoming mail is currently on hold. It is designed to steal login credentials from unsuspecting users and should be deleted without interactio
We have examined this email and determined it is a phishing scam. The message poses as an official notice from Roundcube and ICANN, falsely claiming that the recipient must verify their email address to stay compliant with domain registration requirements. It is designed to steal webmail login cre
BL4CK SP1D3R is ransomware discovered by our researchers while examining new file submissions on the VirusTotal platform. It encrypts victims' files and demands payment for a decryption tool. The ransomware also claims to steal data before encrypting it, combining file encryption with data theft i
During our investigation of blackbullsolclaim[.]pro, we found that this page promotes a fake cryptocurrency airdrop tied to the Black Bull ($ANSEM) project on Solana. It is designed to trick visitors into connecting their cryptocurrency wallets, which can result in the theft of their digital asset
We have examined this email and determined it is a phishing scam. It impersonates a fake hosting provider called "Hosting.ssl," falsely claiming the recipient's SSL certificate is about to expire, and directs victims to a fraudulent login page to steal their email account credentials. This email s
Jeckel is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files stored on the victim's computer, appends the .jeckel-lock extension to their names, and changes the desktop wallpaper. A ransom note is also created in a t
Orexin is ransomware discovered by our researchers during a routine inspection of VirusTotal. It encrypts files, appends a distinctive extension to their filenames, and delivers ransom demands via a text file and a modified desktop wallpaper. On our test machine, each encrypted file was appended