Ololo is ransomware that we discovered while analyzing malware samples uploaded to VirusTotal. It is part of the MedusaLocker family and is designed to encrypt files. Also, Ololo appends the ".ololo" extension to files (e.g., renames "1.jpg" to "1.jpg.ololo" and "2.png" to "2.png.ololo") and drops
We have reviewed smartadsflow[.]top and concluded that it is a deceptive website designed to trick visitors into consenting to get its notification. The method this page uses to obtain this permission is known as clickbait. Usually, notifications from websites like smartadsflow[.]top contain misle
We have analyzed the email and found that it is a fraudulent email disguised as a notification from Intelcom (a legitimate Canadian courier and package delivery company). The scammers behind it seek to extract personal information through a deceptive website included in the email. These types of e
Our research team found the bicarnsh.co[.]in rogue page while investigating dubious websites. It operates by promoting browser notification spam and redirecting visitors to other (likely unreliable/dangerous) websites. Most visitors enter bicarnsh.co[.]in and similar webpages via redirects generat
After inspecting this "DHL - Shipping Container Document Invoice" email, we determined that it is fake. It is presented as a notification from DHL informing the recipient about shipping documents sent to them. The attachment is a phishing file that targets email account log-in credentials (passwor
After examining this "WordPress Contact Email Verification" message, we determined that it is fake. This is a phishing email targeting account log-in credentials. Recipients are deceived into disclosing this information through false claims concerning the validation of the email associated with th
We have examined this email and learned that it is an advance-fee scam. Typically, scammers behind such emails offer large sums of money in return for small payments and (or) personal information. Either way, none of the claims in this and similar emails are true. Whoever receives such an email sh
While investigating dubious websites, our researchers discovered this fake "Spark" airdrop. The scam impersonates the Spark protocol running an airdrop, and this lure tricks users into exposing their cryptowallets to a cryptocurrency drainer. It must be emphasized that this scam is not associated
After inspecting the site (allocation-swelllnetwork[.]co), we concluded that it is a scam. This page is a copy of the original Swell website (swellnetwork.io). Scammers created it to steal cryptocurrency from unsuspecting individuals. Thus, it should be ignored and closed if encountered. IMP
During our analysis of the website (allocation-onbeam[.]co), we found that it mimics the original Beam website (onbeam.com) to trick users into connecting their wallets. This fraudulent web page is used to steal cryptocurrency from victims. Thus, users should avoid visiting it and always examine c