We have inspected freshfruittab.com and found it to be a fake search engine. We also discovered that freshfruittab.com is promoted through a browser hijacker, an extension called Fresh Fruit Search. Fake search engines and browser hijackers should be avoided. Thus, if freshfruittab.com and Fresh F
Our analysis of the site (claim.spxv6900[.]com) has revealed that it is a scam website designed to mimic the real one, spx6900.com. Scammers use this deceptive web page to trick users into participating in a fake $SPX6900 token distribution. Their ultimate goal is to steal cryptocurrency from vict
Our team has inspected the email and concluded that it is a phishing attempt. It is crafted to deceive recipients into thinking they have received a notification from their email service provider about an upcoming password expiration. The goal of this phishing email is to steal personal informatio
We have analyzed DigitalKey and found that it generates intrusive ads and has been flagged as malicious by multiple security vendors. Consequently, we have classified DigitalKey as adware. Users are advised against installing such applications because they can expose users to various online thre
After inspecting this "Review Important Messages" email, we learned that it is spam. This fake message instructs the recipient to review pending emails. By attempting to do so, users are deceived into providing their log-in credentials (passwords) to a phishing website. The spam email with
PLAYFULGHOST is a backdoor-type malware with remote capabilities. It shares traits with the Gh0st RAT (Remote Access Trojan), which has served as a base and has been used in the development of many malicious programs since its code was leaked. PLAYFULGHOST is a multi-functional malware with anti-
Our researchers discovered ServiceDesk while browsing file submissions to the VirusTotal platform. Upon inspection, we determined that this application is adware from the AdLoad malware family. Software within this classification is designed to generate revenue for its developers/publishers thro
OperativeIndexer is a rogue application discovered by our research team during a routine inspection of new file submissions to the VirusTotal website. After analyzing this app, we determined that it is advertising-supported software (adware) belonging to the AdLoad malware family. Adware
"Scroll (SCR) Registration" is a scam that imitates the official website of the Scroll Ethereum scaling solution (scroll.io). The imitator site (register-scroiifdn[.]com; other domains are not unlikely) implies that users who register will receive some benefit. This scam operates as a cryptocurre
NonEuclid is a Remote Access Trojan (RAT) programmed using C#. This RAT allows unauthorized control of a victim’s computer. It bypasses security systems and is harder to detect. NonEuclid uses various techniques, such as avoiding antivirus detection, escalating privileges, and encrypting important