We have examined this email and determined it to be a phishing scam. The message is disguised as an official notification from Roundcube Webmail, claiming that the recipient must update their webmail account to avoid losing email access. Its purpose is to steal login credentials from unsuspecting
We have examined this email and determined it is a phishing scam. The message is disguised as a notification from an email service provider claiming that the recipient's POP3/SMTP settings require an update. It is designed to steal email account credentials from unsuspecting individuals. This emai
We have examined this email and concluded that it is a phishing scam. It is disguised as a document-sharing notification about a non-disclosure agreement addendum, urging recipients to click a link that leads to a fraudulent website. The goal is to steal login credentials, and this email should be
We have examined this email and determined that it is a phishing scam. The message is crafted to appear as an automated system alert from cPanel & WHM, a widely used web hosting control panel, claiming that a temporary failure is blocking incoming mail delivery. The goal is to trick recipients
We have examined this email and determined it is a phishing scam. The message impersonates a OneDrive document-sharing notification, falsely claiming that audited financial statements have been shared with the recipient. Clicking its link leads to a fraudulent identity-verification page designed t
Calipso is ransomware that our researchers found while examining new malware samples submitted to the VirusTotal platform. It encrypts files, appends the ".calipso" extension to their names, changes the desktop wallpaper, and leaves a ransom note in a text file titled "recovery.txt". On our test
EniFrost is ransomware that our researchers discovered while examining malware samples submitted to VirusTotal. It encrypts victims' files using AES-256 encryption and demands a ransom payment in exchange for the decryption key. Unlike most ransomware, EniFrost does not append any extension to en
Zynex is ransomware our research team identified while analyzing new file submissions on VirusTotal. It encrypts files, appends the .zynx extension to their names, and leaves a ransom note in a text file called readme.txt. The attackers also claim to exfiltrate data prior to encryption, threatenin
Flyware is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. Like most ransomware, it encrypts files on the infected machine and demands payment in exchange for a decryption key. On our test machine, this ransomware encrypted files
MAIN is ransomware belonging to the Dharma ransomware family. Our team discovered it during a routine inspection of new submissions to VirusTotal. It encrypts files, appends a complex extension to their filenames, and drops two ransom notes - a pop-up window and a text file named INFO.txt. On our