SparkCat is a cross-platform malware targeting iPhones and Android devices. This malicious software has been around since at least the spring of 2024. It aims to steal cryptocurrency wallet keys by leveraging OCR functionality. SparkCat has been spread through official and third-party app stores.
Our inspection of the "Account Is Due For Update" email revealed that it is spam. We determined that this message is a phishing scam targeting recipients' accounts through an attachment that imitates an email sign-in page. This spam email states that the recipient's email account is due an
Our team has analyzed cabitauthiocine[.]com and found that this is a misleading web page created to trick visitors into accepting its notifications. If this permission is granted to cabitauthiocine[.]com, the site can send fake warnings and other deceptive notifications. Therefore, cabitauthiocine
Our researchers discovered the CmbLabs ransomware during a routine inspection of new submissions to VirusTotal. Ransomware is designed to encrypt data and demand payment for the decryption. It must be emphasized that this malware is not associated with the Consolidated Medical Bio-Analysis, Inc. (
We have examined innodrivegablyticrealnation[.]com and discovered that it distributes unwanted applications (apps like Tiaow VApp, Woiap WApp, Kowi SApp, Disoaq App, and similar) and wants to show notifications. It is highly advised to avoid visiting innodrivegablyticrealnation[.]com because it ma
Our examination of the email has revealed that it is a scam (a phishing email). We have found that it is a fake notification (supposedly from Emirates NBD) regarding a transaction confirmation. The scammers use this phishing email to steal personal information from unsuspecting recipients. It shou
We have analyzed the email and concluded that it is a scam (a phishing email). The scammers behind it aim to trick recipients into believing that this is a notification from Capital One (a legitimate bank) regarding a received security message. The purpose of this scam email is to steal personal i
Our inspection reveals that DeployImprovment operates as adware. Its purpose is to deliver disruptive ads. These ads can promote fraudulent schemes and other harmful content. Additionally, numerous security vendors flag DeployImprovment as malicious software. As a precaution, users are strongly
While inspecting dubious websites, our research team discovered the safecomputercheck[.]com rogue page. It is designed to promote scams and browser notification spam. Additionally, this webpage can redirect users to other (likely untrustworthy/harmful) sites. Most visitors access pages like safec
Our researchers discovered the mergechainsolutions.co[.]in rogue page during a routine investigation of suspicious sites. After examining it, we determined that this webpage promotes spam browser notifications and redirects users to other (likely dubious/malicious) websites. Most visitors access