Dark Intel is ransomware that we discovered while analyzing samples uploaded to VirusTotal. Once a device is infected, Dark Intel encrypts files, appends the ".encrypted" extension to filenames, changes the desktop wallpaper, and provides a ransom note ("Ezz.txt") containing payment instructions.
Our team has discovered a fake website (usual-apps-money[.]lol) imitating the USUAL platform (usual.money). The purpose of this deceptive web page is to steal cryptocurrency from individuals. Users should be careful with crypto-related platforms and always check their legitimacy to avoid financial
Our discovery of MRJOKERPALFINGER1984 occurred while examining malware samples submitted to the VirusTotal platform. MRJOKERPALFINGER1984 is ransomware designed to encrypt files and rename them by appending the ".MRJOKERPALFINGER1984" extension. The ransom note "HELP_DECRYPT_YOUR_FILES.txt" provid
Our inspection of the email has uncovered that it is a phishing email. Scammers designed it to appear like a notification regarding a confirmation of bank information. They aim to trick recipients into opening the attached file and disclosing personal information. This email should be ignored to a
During our review, App x did not exhibit any obvious functionality, making its purpose unclear. Additionally, it is distributed through questionable methods and may be bundled with unreliable apps. Therefore, we classified App x as an unwanted application. Users should avoid installing such apps a
While examining the page, we found that it uses a deceptive method to trick visitors into permitting it to show notifications. Our analysis shows that notifications from singleclick-feed[.]com can include fake warnings. Users should not allow singleclick-feed[.]com to send notifications to avoid p
During our review of rpconcepts[.]xyz we found it to be a deceptive website. Once visited, it presents misleading content to lure visitors into granting it permission to show notifications. It is highly advisable not to agree to receive notifications from such pages, as it can expose users to scam
We have inspected the page (alpha-coinbase[.]com) and found that it is a fraudulent site imitating coinbase.com. This deceptive page aims to trick individuals into taking actions that could lead to the theft of their cryptocurrency. Recognizing scam sites like alpha-coinbase[.]com is important to
Our analysis of swiftpushupdates[.]top has shown that it is an unreliable web page that uses clickbait to deceive visitors into agreeing to receive notifications from the page. If granted permission, swiftpushupdates[.]top can send notifications that may lead to potentially malicious pages. Thus,
Our team discovered Locklocklock ransomware while inspecting samples submitted to VirusTotal. Once successfully deployed, Locklocklock encrypts files on the victim's computer and appends its extension (".locklocklock") to filenames. For example, it renames "1.jpg" to "1.jpg.locklocklock" and "2.pn