We inspected osx-defender[.]pro and found that it is crafted to trick visitors into agreeing to receive its notifications. The site uses clickbait to obtain permission to deliver notifications. Usually, if allowed, sites like osx-defender[.]pro send fake warnings and other messages to lure users i
We have examined the email and concluded that it is a fake letter regarding a Webmail account password validation. We classified it as a phishing email because it contains links leading to a deceptive website designed to steal login credentials from unsuspecting recipients. This email should be ig
TetraLoader is a loader-type malware written in the Rust programming language. Software within this classification is designed to cause chain infections. TetraLoader was built using the MaLoader builder, which is written in Simplified Chinese and has been publicly available since December 2024. T
Our team discovered Asulo while inspecting samples uploaded to the VirusTotal platforms. Our key findings are that Asulo is ransomware from the Xorist family designed to encrypt files and append the ".asulo" extension to them. Additionally, Asulo changes the desktop wallpaper, displays a pop-up wi
Our inspection of the AdEscape has revealed that it is a browser extension capable of delivering unwanted advertisements. For this reason, we classified AdEscape as adware. It is worth noting that this extension is promoted using deceptive websites and ads displayed by it may lead to potentially m
Our team has inspected the email and found that this is a fake notification regarding an unusual login activity. The email includes a deceptive link designed to open a fake website. On this site, users are instructed to provide personal information. The goal of this scam is to extract that informa
GhostSpy is Android malware known for its sophisticated evasion, persistence, and device surveillance methods. Once executed, it maintains a continuous connection to its command-and-control (C2) server and enables extensive remote access and spying capabilities on the compromised device. Victims a
Our researchers discovered stylegridconnect[.]com while investigating suspicious websites. Upon analysis, we learned that this rogue page endorses scams and browser notification spam. It can also redirect users to different (likely dubious/malicious) sites. Most visitors to stylegridconnect[.]com
Katz is the name of a stealer-type malware. As the classification implies, this malicious program is designed to steal vulnerable information from infected devices and installed software. Katz targets log-in credentials, cryptocurrency wallets, and other data. This stealer is promoted as MaaS (Mal
Our research team discovered this fake "Binance" airdrop during a routine investigation of suspicious websites. The deceptive page promotes a cryptocurrency drainer, which operates by draining funds from exposed digital wallets. It must be stressed that this scam is not associated with Binance Hol