While browsing untrustworthy sites, our research team discovered the lavaalchemist[.]top rogue webpage. It operates by promoting spam browser notifications and redirecting visitors to different (likely dubious/dangerous) websites. In most cases, users access pages like lavaalchemist[.]top via red
Lands[.]ninja is the address of a rogue webpage discovered by our research team during a routine inspection of suspicious sites. After examining this page, we learned that it endorses browser notification spam and generates redirects to other (likely unreliable/harmful) websites. The majority of
We have examined the page (aave-app[.]xyz) and discovered that it is fake. It poses as the original Aave platform (app.aave.com) to trick visitors into connecting their wallets. Falling for this scam can cause significant financial loss. Thus, this fraudulent website should be avoided and closed i
We have reviewed knuckledd[.]com and determined that it is designed to trick visitors into enabling browser notifications. Once allowed, the site can deliver intrusive and misleading warnings, offers, and other notifications. Interacting with these notifications may put users at risk of privacy br
We have inspected the email and found that it is a phishing email disguised as a delivery status notification from an email service provider. It includes a link to a phishing website designed to trick visitors into entering personal information. Emails of this type should be ignored to avoid accou
After reading this "Alert Regarding Your System Credentials" email, we determined that it is spam. This message claims that the recipient's password will expire within 24 hours. The recipient is urged to maintain uninterrupted service – thus, they are lured into revealing their email account log-i
After inspecting this "EFT Debit Release" email, we determined that it is spam. This message concerns an EFT (Electronic Funds Transfer) debit payment that will be released today. The goal of this campaign is to trick recipients into entering their account log-in credentials to a phishing file.
Shamos is a variant of the AMOS (Atomic) stealer. This malicious program targets macOS devices and seeks to steal sensitive data. Shamos has been around since at least the summer of 2025. It was developed and is offered as MaaS (Malware-as-a-Service) by a threat actor group dubbed "COOKIE SPIDER
Our investigation revealed that this is a phishing email disguised as a security alert from an online service provider. It includes a link to a fraudulent website aimed at stealing personal information from recipients. Whoever receives this email should disregard the message to prevent account com
Our analysis has shown that it is a phishing email posing as a security notification from an email service provider. The scam email contains a link to a fake site designed to extract personal information from unsuspecting recipients. It should be ignored to avoid account hijacking and other potent