While inspecting new submissions to the VirusTotal website, our research team discovered the LUCKY malicious program. It belongs to the Makop ransomware family. LUCKY (Makop) ransomware is designed to encrypt files and demand payment for the decryption. On our testing system, files locked by this
After inspecting this "Nedbank" email, we determined that it is fake. It is presented as a notification regarding an electronic account statement. This is a lure to trick recipients into visiting a phishing website targeting Nedbank log-in credentials. Victims of this scam mail risk having their
Updates-macos[.]com is a rogue page discovered by our researchers during a routine investigation session browsing dubious websites. We determined that this webpage promotes browser notification spam and generates redirects to different (likely unreliable/malicious) sites. The majority of visitors
Our inspection of the "SharePoint - ACH-Wire Authorization" email revealed that it is spam. This scam message uses an invoice and payroll themed lure to bait recipients into visiting a phishing website. Sites of this kind record provided information and send it to scammers. The spam email
After examining this "Microsoft Office 365 - Password Notification" email, we determined that it is fake. The message alerts recipients that their Microsoft 365 account passwords will expire soon. It must be stressed that this email is not associated with Microsoft or any of the corporation's pro
Our researchers found the cleandiskpc[.]com rogue page while investigating suspicious websites. After analyzing this webpage, we determined that cleandiskpc[.]com promotes browser notification spam and redirects users to other (likely unreliable/hazardous) sites. Most visitors enter cleandiskpc[.
Our researchers discovered the vecum browser extension while investigating a rogue installation setup. After examining this piece of software, we determined that it modifies browser settings to generate redirects. Due to this behavior, vecum is categorized as a browser hijacker. Browser-hi
Our inspection of this "SurePayroll" email revealed that it is fake. This message notifies the recipient of a document that they need to review and sign. This email is not associated with any legitimate services or entities. This spam mail endorses a phishing website that seeks to steal account lo
Our examination of the "Reserve Server" email revealed that it is spam. This scam letter states that a message failed to reach the recipient's inbox due to a server error. Victims who trust these false claims are lured into visiting a phishing website that targets email account log-in credentials
While examining a rogue installation setup, our research team discovered the Protectio7 browser extension. We learned that it operates as a browser hijacker. Protectio7 produces redirects and spies on users' browsing activity. Usually, browser hijackers modify browsers' default search engi