"Your Account Needs Attention!" is a spam email that we have received and subsequently analyzed. We determined that it is a phishing scam. The letter claims that unless the recipient updates their email account - it will be deactivated in a matter of hours. This spam mail aims to trick the recipi
Our team has discovered this technical support scam page while examining websites that use rogue advertising networks and have deceptive ads on them. We learned that the purpose of this page is to scare visitors into calling the provided number (into contacting scammers for fake technical support)
Our researchers discovered the Ask Ali browser extension while inspecting deceptive download webpages. This extension promises easy access to "one of the most prominent online shopping services". The extension's name and the imagery used in its official webpage imply that the e-commerce platform i
We have analyzed the websiteshove[.]com page and found that it uses a clickbait technique to trick visitors into granting it permission to show untrustworthy notifications and redirects to other websites. Our team has discovered websiteshove[.]com while visiting pages that use rogue advertising ne
On February 23rd, another wave of geopolitically-motivated attacks was observed in Ukraine. This campaign employs HermeticWiper (also known as FoxBlade) - a piece of malicious software designed to wipe (delete) data and render devices using the Windows Operating System (OS) - inoperable. Attacks
Our team has discovered the Jjtt ransomware while checking malware samples submitted to VirusTotal. It was found that Jjtt is part of the Djvu ransomware family. Jjtt encrypts files, appends the ".jjtt" extension to filenames, and creates the "_readme.txt" file. The "_readme.txt" file is a ransom
We have analyzed this email and found that its purpose is to trick recipients into providing email account login credentials on the presented phishing website. This email is disguised as an urgent letter regarding payment status. The email encourages recipients to review the provided invoi
Our researchers found the JS ransomware-type program during a routine inspection of new malware submissions to VirusTotal. After launching a sample on our test machine, we learned that the JS program encrypts files and appends their filenames with a ".JS" extension (not to be confused with the .J
Binwu is ransomware that belongs to a ransomware family called Xorist. Our team has discovered Binwu while examining the samples submitted to VirusTotal. After analyzing this ransomware, we have found that it encrypts files, appends the ".Binwu" extension to filenames, and creates the "КАК РАСШИФР
Emolumentsurvey[.]top is a rogue webpage that we discovered while inspecting untrustworthy sites. It is designed to load dubious content, promote browser notification spam, and redirect visitors to other unreliable/malicious websites. Most users access emolumentsurvey[.]top and similar pages via r