Our research team discovered Bitrix while inspecting new malware submissions to the VirusTotal platform. This malicious software operates by encrypting data to demand payment for the decryption, and due to this behavior – it is classed as ransomware. On our test machine, Bitrix encrypted files an
Our investigation reveals that this website (coresky[.]cyou) is designed to impersonate the legitimate Coresky platform (coresky.com) in order to deceive users. It promotes a fake airdrop as bait, with the ultimate goal of stealing cryptocurrency from unsuspecting visitors. This fraudulent site sh
We have examined the site (dappsevmportal[.]site) and found that it aims to steal personal information from unsuspecting visitors. The scammers behind it can use this information to drain crypto wallets. It is important to recognize scam websites like this one to avoid financial loss or other issu
Our team has reviewed the email and discovered that it is designed to extract personal information. Such fraudulent messages are classified as phishing emails. The scammers behind this email include a link to a fake website to trick users into disclosing sensitive details. The phishing ema
"SoDEX Rewards" is a scam page (sodexclaim[.]online; possibly other domains) discovered by our researchers during a routine inspection of suspicious websites. Upon examination, we learned that this webpage operates as a cryptocurrency drainer, i.e., siphons funds from exposed cryptowallets. It mu
Our researchers discovered this fake "DappWallet Node Airdrop" website during a routine investigation. The scam is a crypto drainer that lures victims with the promise of an airdrop. It must be emphasized that, regardless of potential similarities, this scam is not associated with any existing pro
Our team has reviewed the email and classified it as a phishing message. It is disguised as a notification from an email service and contains a link to a fake web page. Scammers use this email to extract personal information from unsuspecting recipients. It should be ignored and deleted. T
After examining this "DocuSign Electronic Signature Request" email, we determined that it is fake. This spam message is presented as a notification from Docusign. Its purpose is to deceive recipients into disclosing their email account log-in credentials to a phishing site. The spam email
This "Cloud Storage Alert" email is spam. It falsely claims that the recipient's cloud storage is 96% full, and if this is not addressed – service interruptions may occur. This is a phishing message that targets email account log-in credentials (passwords). This spam message is presented a
While inspecting new submissions to VirusTotal, our research team discovered the Bushbeater.app adware. Upon examination, we determined that this rogue application belongs to the Pirrit adware family. Advertising-supported software (adware) is designed to generate revenue for developers/publishe