King is a ransomware variant from the Proton family. Our team discovered King while inspecting malware samples submitted to VirusTotal. This ransomware encrypts files, appends an email address and the ".king" extension to filenames, and creates a file named "#Read-for-recovery.txt" (a ransom note)
During our analysis of topimg[.]click, we found that the page aims to deceive visitors into permitting it to send notifications. Topimg[.]click displays misleading content to receive this permission. Sites like topimg[.]click should be avoided/not visited. Topimg[.]click displays a loading
While inspecting ajuce[.]com, our team found that this website is created to lure visitors into granting it permission to show notifications. Once on ajuce[.]com, visitors are presented with a misleading message. If allowed, sites like ajuce[.]com send deceptive notifications promoting various sca
After inspecting the "Email Password Expiration" message, we determined that it is spam. It is presented as a password expiration notification. Victims of this phishing mail risk having their email accounts stolen. The spam letter with the subject "Important: Action Required for Upcoming P
Upon examination, we determined that the "DHL - Customs Clearance" email is fake. This spam email is malspam. It lures recipients by claiming that the attached file contains documents concerning a shipment's customs clearance. The attachment is intended to infect victims' computers with malware.
During our analysis of the email we found that it is a phishing attempt (a phishing email). Scammers who crafter this email aim to trick recipients into believing they have received a notification from an email service provider. Therir ultimate goal is to steal personal information from recipients
Our researchers discovered a ransomware-type program from the Makop family called Defi while inspecting new submissions to the VirusTotal website. Ransomware functions by encrypting victims' data to demand that they pay a ransom for the decryption. On our testing system, Defi encrypted files and
Our research team found totalalltimebestdefender[.]info during a routine investigation of suspicious websites. Upon examination, we determined that this rogue page promotes browser notification spam and redirects users to other (likely unreliable/harmful) sites. The majority of visitors enter web
The Bully is a ransomware-type program discovered by our researchers during a routine inspection of new submissions to the VirusTotal site. The Bully is based on Chaos ransomware. Malicious software within this classification is designed to encrypt data and demand payment for the decryption. Afte
While inspecting news-xhovico[.]cc, our team found that the site employs a deceptive tactic called clickbait. This method is used to entice visitors to accept notifications from news-xhovico[.]cc. Once granted permission, sites like this typically deliver intrusive and misleading notifications.