While investigating dubious websites, our researchers discovered this fake "Chainbase" airdrop. It must be emphasized that this phishing scam is in no way associated with the real Chainbase platform. The purpose of this fraudulent page is to deceive victims into disclosing their cryptocurrency wal
Our researchers discovered this fake "MultiBit" dashboard webpage and determined that it promotes a cryptocurrency drainer. Essentially, victims of this scam have their digital assets stolen. It must be emphasized that this fraudulent page is in no way associated with the actual MultiBit platform.
We have inspected the page (maker-events[.]net) and discovered that it is a fraudulent copy of the original MakerDAO site (makerdao.com). The fake web page promises free tokens as a lure. Its purpose is to trick visitors into taking actions that allow fraudsters to steal their cryptocurrency.
Our researchers found flynewsmedia[.]info while browsing questionable websites. This rogue page is designed to promote browser notification spam and generate redirects to different (likely untrustworthy/harmful) sites. Most users access flynewsmedia[.]info and analogous webpages via redirects prod
Our research team discovered the eveenaiftoa[.]com rogue page while browsing suspicious sites. After investigating this webpage, we learned that it endorses browser notification spam and generates redirects to different (likely unreliable/hazardous) websites. Eveenaiftoa[.]com and similar pages a
We have analyzed enzav[.]xyz and found that it is designed to trick users into allowing notifications. Once permission is given, the site can send deceptive notifications that may direct users to harmful or suspicious websites. For this reason, it is best to avoid enzav[.]xyz and close it if opene
Our team has inspected emberenchanter[.]top and found that it is created to lure visitors into agreeing to receive its notifications. Once permission is granted, emberenchanter[.]top can show misleading notifications containing links to potentially malicious pages. Thus, emberenchanter[.]top shoul
Our analysis of newfreshads[.]top shows that the site is designed to trick users into allowing notifications. Once permission is granted, it can deliver misleading messages that redirect users to potentially harmful or untrustworthy websites. Thus, newfreshads[.]top should not be visited nor permi
We have reviewed flashpushalerts[.]top and concluded that its purpose is to obtain permission to show notifications. If this permission is granted, flashpushalerts[.]top can send deceptive notifications. Interacting with these notifications can lead users to untrustworthy websites. Flashpu
Warlock Group is ransomware that seems to be some variant of the X2anylock ransomware. Once infiltrated, it encrypts data and appends the ".x2anylock" extension to files. For example, it renames "1.jpg" to "1.jpg.x2anylock" and "2.png" to "2.png.x2anylock". Also, Warlock Group creates a ransom not