Rokarolla is a banking trojan targeting Android devices. It abuses Accessibility Services to take near-complete control of infected phones and steal banking and cryptocurrency credentials. Rokarolla was first analyzed by Zimperium researchers Vishnu Pratapagiri and Fernando Ortega. In the
CRIMSON is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts victims' files and demands payment in exchange for decryption. After completing encryption, the ransomware presents its ransom demands in a full-screen message.
macOS.Gaslight Backdoor is a backdoor written in the Rust programming language that also carries information-stealing functionality. It targets Mac operating systems and gives attackers the ability to run commands remotely while quietly collecting data from the infected device. According to rese
We have examined this email and determined that it is a phishing scam. The message poses as an urgent notice from a bank official claiming a payment was sent to the wrong account and requesting the recipient to open an attached PDF. The link inside the PDF leads to a fraudulent website designed to
We have inspected this email and determined it is a phishing scam. It poses as a security notification from an email service provider, falsely claiming a new device has accessed the recipient's account. The purpose is to direct victims to a fake login page and steal their credentials. This email s
We have inspected this email and determined that it is malspam. It is disguised as a message from a hotel guest asking about a room upgrade tied to a Trip.com booking, but its real purpose is to trick the recipient into downloading a malicious file. It should be ignored and deleted. The em
We have analyzed this email and determined it is malspam. Disguised as a shipping document update from a freight forwarding company, it carries a malicious Microsoft Excel attachment designed to install malware. This email should be deleted without opening any files it contains. The email
We have examined this email and determined it is a scam. It is disguised as an urgent payment reminder from a legitimate-sounding business and tricks recipients into clicking a link that leads to a fake website built to steal their email account credentials. This email should be ignored to avoid l
We have examined this email and concluded that it is a scam. It is disguised as an internal file-sharing notification purportedly sent by a Finance Department on behalf of a General Manager. The message is a phishing attempt designed to steal email account credentials, and recipients should ignore
We have inspected this email and found that it is a phishing scam. The message is disguised as an automated system notification claiming the recipient's email account has authentication and configuration issues. It is designed to trick recipients into visiting a fraudulent webmail page and surrend