BLACKNET is ransomware that we discovered while examining malware samples submitted to VirusTotal. It encrypts files on the victim's device, replaces the desktop wallpaper with a ransom message, and delivers additional demands through a pop-up window and a text file. On our test machine, BLACKNET
Search Webo is a browser extension that our researchers classified as a browser hijacker. Once installed, it changes browser settings to promote searchwebo.com, a fake search engine. During installation, Search Webo asks for permission to read browsing history and to change the browser's search s
DenoRAT is a Remote Access Trojan (RAT) that also steals information from infected computers. It is written in Deno JavaScript and consists of over 10,000 lines of code, much of it obfuscated to resist analysis. According to research published by eSentire, DenoRAT is part of the toolkit used by a
We have inspected the email and found that it contains a fake notification claiming a policy violation was detected on the recipient's email account. It is a phishing email designed to steal email login credentials from unsuspecting individuals. It should be ignored to avoid having the account hij
We have inspected this email and determined that it is a phishing scam. The message is disguised as a security notification from Truist, falsely claiming that unusual activity has been detected on the recipient's account. Its goal is to trick users into clicking a link that leads to a fraudulent w
Our research team found the risecoregrowth[.]com rogue page while investigating suspicious websites. After inspecting this webpage, we determined that it uses a fake CAPTCHA check to trick visitors into allowing browser notifications. If granted permission, risecoregrowth[.]com delivers misleading
Our research team found the growthlaunchpoint[.]com rogue page while investigating suspicious websites. After inspecting this webpage, we learned that it promotes browser notification spam and redirects visitors to other (likely unreliable/harmful) sites. Most users reach pages like growthlaunchpo
We have examined this email and determined that it is a phishing scam. The message is disguised as a Dropbox file-sharing notification, claiming a purchase order document has been shared with the recipient and is awaiting their review. It is designed to lure recipients into visiting a fraudulent w
We have inspected this email and concluded it is a scam. The message impersonates Cloudbeds, a legitimate hotel and property management software platform, and presents a fabricated guest reservation summary. It is designed to lure recipients into visiting a fraudulent website where their payment d
After inspecting this email, we determined that it is a phishing scam. The message is disguised as an account closure notification from the recipient's email service provider, falsely claiming that the recipient requested their account be terminated. It is designed to trick recipients into enterin