Dark Project is ransomware that encrypts files on compromised systems and demands payment for a decryption key. It operates as a double-extortion threat: alongside locking files, it exfiltrates sensitive company data and threatens to publish it on a Tor-based data leak site unless a ransom is paid
We have inspected this email and determined that it is a phishing scam. The message is disguised as an official DocuSign notification about a completed purchase contract, urging recipients to download and sign a document. In reality, the link leads to a fraudulent login page designed to steal emai
After inspecting this email, we determined that it is malspam. It is disguised as an official notification from DocuSign, claiming a confidential document is awaiting the recipient's signature. The email's real purpose is to direct recipients to a website that delivers malware. This email should b
Our team has inspected this email and determined that it is malspam. It is disguised as a payroll adjustment notification from an HR department, urging recipients to download a document. The actual purpose of this campaign is to deliver malware through a malicious link. The email should be ignored
We examined this email and found it to be a phishing scam disguised as an automated document-sharing notification. The message falsely claims that a business contact has shared a file with the recipient and prompts them to click a button to view it. This is a trick designed to steal email account
We have examined this email and determined it is a phishing scam. The message is written in Lithuanian and impersonates Swedbank, a legitimate Baltic banking institution, falsely claiming the recipient's account access has been restricted. The goal is to trick recipients into visiting a fraudulent
We have examined this email and determined that it is a phishing scam. It impersonates a mail routing service and falsely warns the recipient that their incoming emails are being blocked due to a configuration error. The goal is to lure victims into entering login credentials on a fraudulent websi
Our researchers discovered primefixbridge[.]it.com while investigating dubious websites. After examining this rogue page, we determined that it promotes browser notification spam and generates redirects to other (likely unreliable/dangerous) sites. Most visitors reach pages like primefixbridge[.]i
Black Lotus is ransomware our research team identified while examining new malware samples submitted to VirusTotal. It encrypts files, appends a distinctive extension to their names, drops a ransom note as a text file, and changes the desktop wallpaper to display a ransom message. On our test mac
We have examined this email and determined that it is a phishing scam. The message is disguised as a webmail security notification, falsely claiming that users must complete a human verification check to maintain access to their account. Its goal is to direct recipients to a fake login page where