After reviewing this email, we determined it is malspam. The message is disguised as a payment receipt from Intuit QuickBooks to persuade recipients into clicking a fraudulent link. That link leads to a fake Adobe download page that delivers a malicious file. This email should be ignored and delet
WindRelay is a specialized NFC relay malware targeting Android users across Central Europe. Working in tandem with SpyNote, a Remote Access Trojan, it captures contactless payment card data and streams it to attackers in real time. According to research by Group-IB, the malware has been active sin
FLocker is a ransomware-type program that our researchers analyzed while reviewing malware samples submitted to VirusTotal. It encrypts victims' files, renames them using Base64 encoding, appends the .Flock extension, and changes the desktop wallpaper. On our test machine, FLocker encoded both th
We have examined this email and determined it is a scam. The message is disguised as an urgent shipment notification from CMA CGM, a legitimate container shipping company, falsely claiming that cargo containers have not been gated in for loading. It is a phishing email designed to steal email logi
After examining this email, we determined it is a scam. The message is disguised as an automated security alert from an internal IT team, falsely claiming that a suspicious process was detected on the recipient's workstation. It is a phishing email that pushes recipients toward a fraudulent sign-i
We examined this email and found it to be a phishing scam impersonating DHL Express. The message falsely claims that a package delivery attempt failed due to an incorrect address and urges recipients to click a link to reschedule. That link leads to a fake login page designed to steal email creden
We have examined this email and determined that it is a phishing scam. The message is designed to look like an automated notification from a project collaboration platform, falsely claiming that an administrator has added the recipient to a team. Its purpose is to trick the recipient into visiting
After inspecting this email, we determined it is a scam. The message is disguised as an automated system notification from a webmail or email hosting provider, falsely claiming that the recipient's mailbox migration has failed due to a configuration error. It is a phishing email designed to trick
We have examined this email and determined it is a phishing scam. The message impersonates Fiserv, a financial technology company, and falsely claims the recipient has an ACH payment on hold. Clicking the link leads to a fraudulent login page designed to steal account credentials. This email shoul
ZAWOOO is ransomware our research team discovered while examining new malware samples submitted to VirusTotal. It encrypts victims' files and renames them to random strings, replacing both the original filename and extension with random characters. The attackers also threaten to leak stolen data t