Step-by-Step Malware Removal Instructions

cPanel Email/Password Update Scam
Phishing/Scam

cPanel Email/Password Update Scam

We have examined this email and concluded it is a phishing scam. It poses as an automated notice from cPanel Webmail support, falsely claiming the recipient must update their email credentials or lose mailbox access. This email should be ignored. The email claims the recipient's mailbox wi

Rokarolla Banking Trojan (Android)
Trojan

Rokarolla Banking Trojan (Android)

Rokarolla is a banking trojan targeting Android devices. It abuses Accessibility Services to take near-complete control of infected phones and steal banking and cryptocurrency credentials. Rokarolla was first analyzed by Zimperium researchers Vishnu Pratapagiri and Fernando Ortega. In the

CRIMSON Ransomware
Ransomware

CRIMSON Ransomware

CRIMSON is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts victims' files and demands payment in exchange for decryption. After completing encryption, the ransomware presents its ransom demands in a full-screen message.

macOS.Gaslight Backdoor (Mac)
Mac Virus

macOS.Gaslight Backdoor (Mac)

macOS.Gaslight Backdoor is a backdoor written in the Rust programming language that also carries information-stealing functionality. It targets Mac operating systems and gives attackers the ability to run commands remotely while quietly collecting data from the infected device. According to rese

Misdirected Payment Email Scam
Phishing/Scam

Misdirected Payment Email Scam

We have examined this email and determined that it is a phishing scam. The message poses as an urgent notice from a bank official claiming a payment was sent to the wrong account and requesting the recipient to open an attached PDF. The link inside the PDF leads to a fraudulent website designed to

New Device Signed In To Your Account Email Scam
Phishing/Scam

New Device Signed In To Your Account Email Scam

We have inspected this email and determined it is a phishing scam. It poses as a security notification from an email service provider, falsely claiming a new device has accessed the recipient's account. The purpose is to direct victims to a fake login page and steal their credentials. This email s

Trip.com Booking Confirmation Email Virus
Phishing/Scam

Trip.com Booking Confirmation Email Virus

We have inspected this email and determined that it is malspam. It is disguised as a message from a hotel guest asking about a room upgrade tied to a Trip.com booking, but its real purpose is to trick the recipient into downloading a malicious file. It should be ignored and deleted. The em

Insoorya Express Cargo Shipment Documents Email Virus
Phishing/Scam

Insoorya Express Cargo Shipment Documents Email Virus

We have analyzed this email and determined it is malspam. Disguised as a shipping document update from a freight forwarding company, it carries a malicious Microsoft Excel attachment designed to install malware. This email should be deleted without opening any files it contains. The email

Invoice Is Past Due Email Scam
Phishing/Scam

Invoice Is Past Due Email Scam

We have examined this email and determined it is a scam. It is disguised as an urgent payment reminder from a legitimate-sounding business and tricks recipients into clicking a link that leads to a fake website built to steal their email account credentials. This email should be ignored to avoid l

Finance Department (General Manager) Secure File Email Scam
Phishing/Scam

Finance Department (General Manager) Secure File Email Scam

We have examined this email and concluded that it is a scam. It is disguised as an internal file-sharing notification purportedly sent by a Finance Department on behalf of a General Manager. The message is a phishing attempt designed to steal email account credentials, and recipients should ignore