While investigating untrustworthy websites, our researchers found a HyENA trading platform imitating page. It is an almost perfect visual copy of the legitimate site, with just a single letter different in its domain. The goal of this scam webpage is to deceive users into exposing their cryptowall
After inspecting this "cPanel Mailbox Settings Might Need An Update" email, we determined that it is fake. This spam message falsely claims that there is an issue concerning the recipient's cPanel settings. The purpose of this spam campaign is to lure users into disclosing their email account log-
During a routine investigation, our researchers discovered a webpage that impersonates the Jupiter DeFi platform (jup.ag). The page we found is designed to deceive users into exposing their digital wallets to a cryptocurrency drainer. Essentially, this scam aims to steal its victims' digital asset
Our research team discovered sogionowlid[.]com while browsing untrustworthy sites. Upon examination, we learned that this rogue page promotes browser notification spam and redirects users to different (likely unreliable/dangerous) websites. Most visitors to webpages like sogionowlid[.]com enter th
Cancouss.com is a rogue webpage designed to deceive visitors into permitting browser notification delivery. It is also capable of producing redirects to other (likely unreliable/dangerous) sites. Our researchers discovered this page while investigating websites that use rogue advertising networks
Our team has examined the email and concluded that it is a scam. It contains a fraudulent delivery notification and a link to an untrustworthy website. Falling for this scam can lead to data theft, computer infections, and other issues. Thus, recipients should ignore this message. The scam
Our review indicates that this email is a scam, crafted to seem urgent and important to entice recipients into clicking the provided link. The attackers behind it are attempting to steal personal information. Following the instructions provided in the email and on the deceptive page can result in
During our inspection of malware samples submitted to VirusTotal, we discovered ransomware called ClearWater. Once executed, ClearWater encrypts victim's files and appends its extension (".clear"). For instance, it renames "1.jpg" to "1.jpg.clear" and "2.png" to "2.png.clear". It also creates a te
We have inspected the site (solbullishdegen[.]com) and determined that it is designed to trick recipients into compromising their cryptocurrency wallets. It copies the design of the original BULLISH website (bullishdegen.com) to appear trustworthy. This website should be avoided to prevent financi
Our analysis shows that this is a scam email that is designed to appear urgent and important to trick recipients into opening the included link. The scammers behind this fraudulent email aim to extract personal information. Falling for this scam can lead to account hijacking and further issues.