Sinobi is ransomware that encrypts files to prevent victims from accessing them. Also, it changes the desktop wallpaper, creates a ransom note ("README.txt"), and appends its extension (".SINOBI") to files. An example of how files encrypted by Sinobi are renamed: "1.jpg" is changed to "1.jpg.SINOB
Our researchers discovered this "Hyperliquid Fee Refund" scam that promotes a cryptocurrency drainer. This deceptive webpage masquerades as the official website of the Hyper Foundation (hyperfoundation.org) and aims to drain funds from exposed cryptowallets. It must be emphasized that this scam is
Our research team discovered the maxadsrank[.]top rogue webpage while browsing untrustworthy websites. After inspecting this page, we learned that it endorses browser notification spam and produces redirects to other (likely dubious/harmful) sites. Maxadsrank[.]top and analogous webpages are most
Maticiess[.]com is a rogue webpage discovered by our researchers during a routine inspection of suspicious sites. Upon examination, we determined that this page promotes browser notification spam and redirects visitors to other (likely unreliable/dangerous) websites. Most users access maticiess[.]
Our inspection has revealed that this is a scam site (eligibility-humanity[.]org) that promotes a fake cryptocurrency giveaway (airdrop). It is designed to appear like an airdrop held by the official Sahara AI platform (saharaai.com). Falling for this scam can result in sighnifican monetary loss.
Our examination of unproediss[.]com has revealed that it is a fraudulent site aiming to deceive visitors into enabling notifications. If permission is given, the site can send false warnings and other misleading notifications. Thus, users should avoid visiting unproediss[.]com and never agree to r
Our analysis has shown that this scam involves a deceptive email (and its attachment) and a fraudulent website. The scammers behind it use scare tactics to trick recipients into disclosing personal information. Such scams are known as phishing scams. If this or a similar email is received, it shou
Our inspection of signalreconnect.co[.]in has revealed that it is a misleading website designed to trick visitors into granting it permission to show notifications. If permitted, signalreconnect.co[.]in can deliver deceptive notifications. Users should never trust web pages like signalreconnect.co
While browsing dubious websites, our research team discovered the anchomoross[.]com rogue page. It promotes browser notification spam and generates redirects to different (likely untrustworthy/hazardous) sites. Anchomoross[.]com and similar webpages are most commonly accessed through redirects cau
During a routine inspection of new malware submissions to VirusTotal, our research team found yet another ransomware based on Makop, named Ziver. Malicious software within this classification operates by encrypting data and demanding payment for the decryption. On our testing system, Ziver encryp