EtherRAT is a remote access Trojan (RAT) that gives attackers remote control over infected devices. It was first discovered in late 2025 and has been used in advanced attacks targeting both Linux and Windows systems. It is known that EtherRAT is now delivered through a fake installer that looks li
We have examined searchscr.com and determined that it is a fake search engine. It can lead users to questionable pages and may be associated with unwanted extensions classified as browser hijackers. Users should use only legitimate search engines to avoid the risks associated with sites like searc
Our team has tested dinosrchius.com and found that it is a questionable search engine. It means it may generate unwanted, potentially misleading results. It is worth mentioning that such search engines are often pushed through browser hijackers. Users should avoid using dubious search engines and
We have analyzed this scam and found that it involves at least two websites (xamanwallet-token[.]pro and xaman-wallet[.]com). It imitates the original Xaman platform (xaman.app) to appear legitimate. The purpose of this fraudulent scheme is to trick visitors into taking actions that can result in
Our team has inspected the message and concluded that it is a phishing email designed to appear as an important notification from the email provider. Its purpose is to trick recipients into opening the provided website. That page is controlled by scammers who seek to steal personal information.
Our inspection has revealed that this is a scam email posing as a security-related notification from the email service provider. Its purpose is to lure recipients into a fraudulent page designed to pilfer personal information. Stolen details can be used to hijack personal accounts and for other ma
We have analyzed the email and found that it is disguised as a "secured message" from the Canada Revenue Agency. In reality, it is a phishing email written by fraudsters who aim to steal personal information via a fake website. Falling for this scam can result in account compromise and further pro
We have examined the message and found that it is written by scammers who seek to trick recipients into sharing personal information. The email is disguised as a notification from the email provider to appear legitimate. It contains a link to a deceptive website. Such scams are classified as phish
MIMICRAT is a remote administration Trojan (RAT) written in C++. Cybercriminals were observed distributing the RAT using a deceptive technique known as ClickFix. Once a device is infected with MIMICRAT, the attackers can perform various malicious actions remotely. If this threat is detected, it sh
Lockdown is ransomware designed to block access to files by encrypting them. In addition to encrypting data, it appends its extension (".crypt_lock") to files. For example, it renames "1.jpg" to "1.jpg.crypt_lock", "2.png" to "2.png.crypt_lock", and so forth. Lockdown also displays a full-screen r