While examining questionable reputation websites, our researchers found the apptrue[.]monster rogue page. Upon inspection, we learned that it promotes deceptive content and browser notification spam. This webpage can also produce redirects to other (likely untrustworthy/hazardous) sites. Most vis
Our analysis of the site has shown that it is a fraudulent web page that uses fear tactics to promote a computer security solution. While such websites can promote legitimate products and services, their methods are not legitimate. Thus, users are advised to ignore them and close such sites if the
Our research team discovered this fake "Claim Kaspa" webpage while investigating suspicious sites. The lure is an unclaimed token airdrop, and those who attempt to participate – expose their cryptowallets to a cryptocurrency drainer. It must be emphasized that this scam is in no way associated wit
We have examined ficullbele.co[.]in and discovered that it uses a deceptive method to trick visitors into granting it permission to send notifications to their devices. If allowed, ficullbele.co[.]in can show notifications designed to promote unreliable websites, including various scams. Thus, fic
Our analysis of the email has shown that it contains a fake notification regarding an email account update. It is crafted to lure unsuspecting recipients into opening a fake web page and disclosing personal information. Such scams are known as phishing attempts, and they should be ignored to avoid
Krypt is a ransomware-type program that encrypts data and demands a ransom for its decryption. Files encrypted by Krypt have their names altered. Original filenames are changed to a random character string and appended with a ".helpo" extension; for example, a file titled "1.jpg" on our test machi
CurlBack RAT is a remote access Trojan that allows attackers to perform various actions on infected devices. Usually, RATs like CurlBack are employed to steal sensitive information, deploy additional payloads, or perform other malicious activities. If a computer is infected with the CurlBack RAT,
We have inspected the website (novaverification.pages[.]dev) and found that it is used by scammers who aim to steal personal information from unsuspecting users. The site displays a deceptive message to extract personal details. Victims of this scam can suffer monetary loss. Thus, if encountered,
During our inspection of the site (claims-pumpbtc[.]net), we found that it is a fake website masquerading as the legitimate PumpBTC site (mainnet.pumpbtc.xyz). Scammers behind the fraudulent page aim to steal cryptocurrency from users. Users should avoid interacting with the fake site to avoid mon
GRAPELOADER is a malware used in the initial stages of an infection to collect system data, prep the device for further infiltration, and carry it out (i.e., download/install additional payloads). This malicious program has been used in a campaign that began in January 2025. This activity has bee