Kora is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files stored on the victim's machine and demands payment in exchange for decryption. On our test machine, this ransomware encrypted files and appended the ".kora"
After inspecting this email, we determined that it is a phishing scam. It poses as an automated security notification from the recipient's email service, falsely claiming that incoming messages are being held pending verification. The goal is to steal email login credentials by directing recipient
Our team has inspected this email and determined it is malspam. The message poses as a business contract procurement notification and prompts recipients to click a link to review a shared document. That link leads to a malicious website that automatically downloads a trojanized file onto the victi
We have inspected this email and determined that it is a phishing scam. The message falsely claims the recipient's webmail account has been selected for an AI-powered upgrade and urges them to sign in via a provided link. That link leads to a fraudulent login page designed to steal email credentia
We examined this email and determined it is a phishing scam. The message is disguised as an urgent notice from the recipient's email service provider, falsely claiming that a mandatory system upgrade is overdue. Scammers use it to lead recipients to a fake login page where their email credentials
We have examined this email and determined that it is a phishing scam. It poses as an urgent alert from an email service provider, claiming that several incoming messages could not be delivered. The aim is to trick recipients into submitting their login credentials on a fraudulent website. The ema
Glitch SPY is an Android Remote Access Trojan (RAT) capable of executing over 70 commands on infected devices. Analyzed by Cyble Research and Intelligence Labs, it is distributed through a fraudulent Polish apartment-rental platform that tricks users into sideloading a malicious APK. Once installe
Our researchers discovered boodoginoidal[.]com while investigating dubious websites. After examining this rogue page, we determined that it promotes browser notification spam and generates redirects to other (likely unreliable or dangerous) sites. Most visitors reach it through redirects from webs
Developer is ransomware that our researchers identified during a routine review of new malware submissions to VirusTotal. It encrypts files on the victim's computer and demands a ransom payment in exchange for the decryption key. The attackers also claim to steal sensitive data and threaten to pub
During our investigation of dubious websites, we discovered ufdlabs[.]com, a fraudulent page impersonating the real Unicorn Fart Dust project. The site falsely claims that a $UFD token allocation event is live, prompting visitors to connect their cryptocurrency wallets. In reality, ufdlabs[.]com i