Our team has inspected the email and concluded that it is a phishing attempt. This message claims that the recipient has received shared documents. It provides a link to a fake website designed to harvest personal information. Victims of this scam may have their accounts hijacked. Thus, it is high
Our inspection has revealed that airdrop.vooooi[.]xyz is a scam website designed to promote a fake cryptocurrency giveaway. It is disguised as the original VOOI site (vooi.io) to appear legitimate. The scammers behind it aim to steal cryptocurrency from unsuspecting visitors. This page should not
We have checked this email and found that it encourages recipients to review an invoice. However, this is a scam, as no invoice is included in this email, and the provided link leads to a fake website designed to steal information. Emails of this type are classified as phishing attempts and should
GachiLoader is a malicious program written in Node.js. This malware is classed as a loader – it is designed to download/install additional malicious programs onto compromised systems. GachiLoader has been distributed through a campaign leveraging compromised YouTube accounts. In this campaign, the
Our researchers found giumbletepe.co[.]in while browsing untrustworthy websites. This rogue page promotes browser notification spam and generates redirects to various (likely unreliable/dangerous) sites. Most visitors to giumbletepe.co[.]in and analogous webpages enter them through redirects produ
Search.ansiblealgorithm.com is a website that our research team discovered while analyzing the AI Output Algo Tool. This browser extension is advertised as a tool that provides AI (Artificial Intelligence) summaries in multiple languages for search queries/results. AI Output Algo Tool is a browse
Our researchers discovered this fake "Brevis Snapshot" page (brevis-snapshot[.]xyz; other domains are possible) during a routine investigation. It is in no way associated with the real Brevis Network. The purpose of this scam is to trick users into connecting their digital wallets to a cryptocurre
ResidentBat is an Android spyware that is installed through physical access to the victim’s device. Once infiltrated, it abuses broad application permissions and enables an Accessibility Service, giving it deep and persistent control over the phone. If detected, ResidentBat should be removed immed
After reviewing this "DHL Express - Incoming Package Arrival Notification" email, we determined that it is fake. This phishing message is presented as an alert concerning an incoming package. The goal is to deceive recipients into revealing their email account log-in credentials. It must be emphas
"cPanel Account Suspension" is a spam email claiming that suspicious activity has been detected on the recipient's account. It was supposedly suspended as a security measure. The goal of this fake message is to trick victims into visiting a phishing website targeting email account log-in credentia