Evolution is a Go-based information-stealing malware that collects sensitive data from a wide range of applications and accounts, including web browsers, VPN clients, and gaming accounts. The malware is used to harvest information that can be misused for unauthorized access or resale. Victims may
Our team has reviewed the email and determined that it is a phishing attempt. It is written by scammers who seek to steal personal information. The goal is to trick recipients into opening a fake website and entering the requested details. Victims of this scam may lose access to personal accounts
We have examined the message and found that cybercriminals are using it to trick recipients into infecting their devices. It is disguised as a "social security statement update" to appear legitimate. This fraudulent email should be ignored to avoid problems like financial loss and identity theft.
During our inspection of malware samples uploaded to VirusTotal, we discovered LQTOREQ, which is ransomware designed to encrypt files. Also, LQTOREQ appends the ".lqtoreq" extension to files. For instance, it renames "1.jpg" to "1.jpg.lqtoreq", "2.png" to "2.png.lqtoreq", and so on. Additionally,
We have analyzed the message and concluded that it is a phishing attempt. It is disguised as a notification from the email service provider. The purpose of this message is to trick recipients into believing that they have to follow the provided instructions to fix the issue that has supposedly occ
A0Backdoor is a backdoor malware delivered using a malicious DLL sideloading technique. The malware includes anti-sandbox features to evade detection and communicates via a hidden DNS-based command-and-control channel. Having a device infected with A0Backdoor can lead to further infections and ser
EtherRAT is a remote access Trojan (RAT) that gives attackers remote control over infected devices. It was first discovered in late 2025 and has been used in advanced attacks targeting both Linux and Windows systems. It is known that EtherRAT is now delivered through a fake installer that looks li
We have examined searchscr.com and determined that it is a fake search engine. It can lead users to questionable pages and may be associated with unwanted extensions classified as browser hijackers. Users should use only legitimate search engines to avoid the risks associated with sites like searc
Our team has tested dinosrchius.com and found that it is a questionable search engine. It means it may generate unwanted, potentially misleading results. It is worth mentioning that such search engines are often pushed through browser hijackers. Users should avoid using dubious search engines and
We have analyzed this scam and found that it involves at least two websites (xamanwallet-token[.]pro and xaman-wallet[.]com). It imitates the original Xaman platform (xaman.app) to appear legitimate. The purpose of this fraudulent scheme is to trick visitors into taking actions that can result in