Aldet is ransomware our research team identified during a routine inspection of new submissions to the VirusTotal website. It encrypts files, appends a unique victim ID, the attackers' email address, and a ".aldet" extension to filenames, drops a ransom note, and replaces the desktop wallpaper. O
We have inspected this email and determined it is a phishing scam. The message is disguised as an official notification from Zoho, falsely claiming that a server upgrade is urgently required. Its purpose is to trick recipients into handing over their email login credentials on a fraudulent website
We have examined this email and concluded that it is a phishing scam. The message impersonates an automated IT Support notification, falsely claiming the recipient's email account is scheduled for permanent deletion. Its purpose is to trick people into entering their login credentials on a fraudul
After examining this email, we determined it is a phishing scam. The message falsely claims the recipient's email account password is about to expire and urges them to take immediate action to retain access. Clicking the link leads to a fraudulent login page designed to steal email credentials. Th
SnakeBiteAgent is a Remote Access Trojan (RAT) discovered by ANY.RUN. It hands attackers control over an infected Windows computer and bundles password theft, banking fraud, cryptocurrency theft, and live surveillance into a single tool. What makes this RAT unusual is that it does not stay comple
Our research team found olsi5[.]xyz while investigating suspicious websites. After examining this rogue page, we learned that it uses a fake McAfee Safety Warning scam to trick visitors into enabling browser notifications. If permission is granted, olsi5[.]xyz sends unwanted advertisements directl
PackClient is a Remote Access Trojan (RAT) marketed through Telegram channels and deployed by a Chinese-speaking cybercriminal group tracked as TA4922. It gives attackers full remote control over compromised computers and supports over 60 remote commands. According to research published by Proofp
We have examined this email and determined it is a phishing scam. The message is crafted to resemble a legitimate business procurement request attributed to ExxonMobil. In reality, the HTML attachment it carries opens a fake email login form on the victim's device to steal credentials. This email
We have examined this email and concluded that it is a scam. The message poses as a payment notification containing an attached PDF receipt and tricks recipients into clicking a download link. That link leads to a phishing page designed to steal login credentials. This email should be deleted with
We have examined this email and determined it is a phishing scam. The message is disguised as a wire transfer notification from GreenState Credit Union and attempts to trick recipients into visiting a fraudulent website designed to steal their email account credentials. This email should be ignore