PackClient is a Remote Access Trojan (RAT) marketed through Telegram channels and deployed by a Chinese-speaking cybercriminal group tracked as TA4922. It gives attackers full remote control over compromised computers and supports over 60 remote commands. According to research published by Proofp
We have examined this email and determined it is a phishing scam. The message is crafted to resemble a legitimate business procurement request attributed to ExxonMobil. In reality, the HTML attachment it carries opens a fake email login form on the victim's device to steal credentials. This email
We have examined this email and concluded that it is a scam. The message poses as a payment notification containing an attached PDF receipt and tricks recipients into clicking a download link. That link leads to a phishing page designed to steal login credentials. This email should be deleted with
We have examined this email and determined it is a phishing scam. The message is disguised as a wire transfer notification from GreenState Credit Union and attempts to trick recipients into visiting a fraudulent website designed to steal their email account credentials. This email should be ignore
We have examined this email and concluded that it is a scam. It is designed to appear as an official billing notice from LinkedIn Corporation, falsely claiming the recipient has an outstanding invoice that requires payment. Recipients should disregard this message entirely to avoid falling victim
We have inspected this email and found that it is a phishing scam disguised as an official notice from "Webmail Optimum" and "CPanel Webmail." The message falsely claims that terms and conditions have been updated and pressures recipients to confirm their agreement via a provided link. Clicking th
After inspecting this email, we determined that it is malspam. The message poses as a vendor payment notification from Intuit QuickBooks and contains a button that redirects recipients to a fake website, which silently downloads a malicious file. This fraudulent email should be ignored and deleted
Fiasco Ransomware is ransomware that our research team found while inspecting new submissions to VirusTotal. It encrypts files, appends the ".secure" extension to their filenames, and drops a ransom note. The attackers also claim to steal sensitive data before encryption and threaten to publish it
We have examined this email and determined that it is a phishing scam. The message masquerades as a routine order confirmation from John Lewis & Partners, a well-known UK department store. Its links lead to a fraudulent website designed to steal Google account credentials. Recipients should de
After inspecting this email, we determined it is malspam. The message impersonates the U.S. Social Security Administration, claiming the recipient has an Annual Earnings Statement ready for download. Its true purpose is to deliver malware through a link leading to a fraudulent website. This email