We have inspected this email and determined that it is a phishing message disguised as a mailbox termination notice from an email administrator. It falsely claims that someone asked for the recipient's email account to be permanently deleted. The letter exists only to push recipients onto a fake s
We have inspected this email and determined it is a phishing scam. The message poses as a notification from a web hosting provider, claiming older report files are scheduled for deletion and urging recipients to review the plan. Clicking the embedded link leads to a fake webmail login page that co
We have inspected this email and determined it is a phishing scam. It is disguised as a notification from the Internal Revenue Service (IRS) regarding a document supposedly available for review. Clicking the link leads to a fraudulent website intended to steal credentials or personal information.
After examining this email, we determined it is a phishing scam. The message poses as an official security notice from Interactive Brokers, claiming recipients must enroll a trusted device for two-factor authentication. Clicking the link inside leads to a fraudulent website designed to steal accou
E4del RAT is a Remote Access Trojan (RAT) that hides inside a genuine, digitally signed Discord application. Once installed, it lets attackers watch the victim's screen in real time, run commands, capture screenshots, and drop additional malware onto the machine. The RAT was uncovered by the SOCR
PINHOLE RAT is a Remote Access Trojan (RAT) uncovered by the SOCRadar Threat Research Unit (STRU) in August 2026. Once installed, it gives attackers remote control over an infected Windows computer, allowing them to steal files, capture screenshots, run shell commands, and load additional maliciou
SynkLoader is a malware loader that uses a modular design to deploy a chain of attack tools against infected Windows systems. According to research published by Expel, the threat was first observed in August 2026 while investigating an incident on a client network. The infection begins with a phi
We have examined this email and found it to be a phishing scam. Disguised as an official cPanel security notice, it falsely claims the recipient's email account must be verified to remain active during a server upgrade. The goal is to steal email login credentials. This email should be ignored.
We have inspected this email and determined it is a phishing scam. It is disguised as an automated alert from cPanel and Roundcube Webmail Support, falsely informing the recipient that incoming messages were blocked due to a server storage issue. The goal is to lure recipients into visiting a frau
We have examined this email and determined it is a phishing scam. The message is disguised as a routine business notification about a purchase order and its corresponding proforma invoice, and it urges the recipient to click a link to view the documents. That link leads to a fake login page design