Fraud ransomware is ransomware that our research team found while examining new submissions to VirusTotal. It uses AES-256 to encrypt victims' files, with the encryption key protected by RSA-2048, making locked files inaccessible without the attacker's private key. On our test machine, the ranso
We have examined this email and determined it is a phishing scam. The message is designed to impersonate official communications from SODRA, Lithuania's State Social Insurance Fund Board, by falsely claiming the recipient is owed a social insurance overpayment refund. The aim is to steal banking c
We have inspected this email and determined that it is a phishing scam. The message is disguised as an official notification from a domain or email hosting provider, falsely claiming the recipient's accounts are being migrated to new server infrastructure. Its true purpose is to steal email login
We have inspected this email and determined that it is a phishing scam. The message is disguised as a password expiration alert from an IT help desk and aims to trick recipients into handing over their email credentials on a fraudulent website. This email should be ignored. The "Access Ren
We have examined this email and determined it is a phishing scam. It is disguised as a service alert from a cloud suite provider, falsely claiming that an error has occurred with the recipient's domain services registry. The goal is to trick recipients into visiting a fake login page and entering
We have examined this email and determined that it is a scam. The message falsely claims that the recipient's Google Cloud storage is critically full and that their account is scheduled for permanent deletion within 24 hours. It is an affiliate scam designed to push recipients toward paid cloud st
NETRYX RAT is a Remote Access Trojan (RAT) written in Rust. According to an analysis by Joe Security, the malware disguises itself as a legitimate application called DeviceSync and silently installs in the user's AppData folder. Its main purpose is to give attackers the ability to run arbitrary c
Ultimate is a ransomware we discovered during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's computer and demands a ransom payment to restore access. It also changes the desktop wallpaper, displays a persistent pop-up window, and registers itse
Secure PasswordVault is presented as a password manager that stores login credentials and checks their security. Our research team found this application being promoted through deceptive advertising networks. Due to the way it is spread, we classified Secure PasswordVault as a Potentially Unwanted
We have examined this email and determined it is a phishing scam disguised as an official security alert from Chase Bank. The message falsely claims the recipient's online banking access has been locked and urges them to click through to a fraudulent login page. It should be ignored. Anyone who en