Our research team discovered Freshy Search while reviewing newly submitted browser extensions. It falls under the browser hijacker classification. Once added to a browser, it changes certain settings to promote freshy.com, a questionable search engine that generates its own results. Like most sof
Newspulsenow.net is a fake search engine promoted by browser hijackers. Our team analyzed this website and found that it is distributed through browser-hijacking software that modifies browser settings to force users to visit it. Newspulsenow.net cannot generate its own search results and instead
KalinkaCrypt is ransomware that we investigated after it was uploaded to VirusTotal. Once it infects a system, it encrypts files, appends a distinct extension to their names, and drops a ransom note demanding payment for decryption. On our test machine, this ransomware encrypted files and appende
We have examined this email and determined that it is a phishing scam. The message is disguised as an important notice from a mail server administration team, urging recipients to take action on their account. Its actual purpose is to steal email login credentials through a fake webmail login page
Doommageddon is ransomware that our researchers discovered while inspecting new submissions to VirusTotal. Besides encrypting files, this group also runs a dedicated data leak site on the Tor network, where stolen files are threatened to be published if the ransom is not paid. Once it infects a de
SquadLocker is ransomware first identified by researchers at IQBlack. We investigated this threat and confirmed it encrypts victims' files, appends the .SquadLocker extension to their names, and drops a ransom note. It also changes the desktop wallpaper. On our test machine, a file named "1.jpg"
This page displays a fake Windows Security warning claiming that the system's digital certificate has expired. It does not fix anything - clicking through downloads a file that installs malware. Neither Microsoft nor Windows is affiliated with this scheme in any way. This page is a malware
We have inspected the email and found that it is a phishing message disguised as a payroll notification from a company referred to as Selectfood. It claims that information is missing from the recipient's payroll file and urges them to click a button to update it, which leads to a fake login page
This email pretends to be a Roundcube Webmail notification about mandatory security updates. In reality, it is a phishing email designed to steal email account credentials. It should be ignored and the linked page should never be used to "review" or update any account settings. The email i
We examined this email and determined that it is a phishing scam disguised as an official notification from Bank of America about a dispute claim. It urges recipients to click a link to view the dispute status, which leads to a fraudulent page designed to steal banking credentials. This email shou