While investigating questionable sites, our researchers discovered an application called Pdflash. This app is endorsed as a free tool that allows users to convert, merge, and compress PDF format documents. Upon examination, we determined that Pdflash is a PUA (Potentially Unwanted Application). So
We have analysed the website (flare-networkxrp[.]com) and discovered that it mimics the original/official Flare website (flare.network). The purpose of this site is to steal cryptocurrency from unsuspecting users. Thus, it is highly advisable to avoid visiting this fraudulent site and always verif
Our research team found the croursem.co[.]in rogue page while inspecting dubious websites. This webpage is designed to promote browser notification spam and cause redirects to other (likely untrustworthy/hazardous) sites. Croursem.co[.]in and similar pages are primarily accessed via redirects caus
Our inspection of the "Account Review Report" email revealed that it is spam. This is a phishing scam that targets recipients' email accounts through fake claims about soon-to-expire passwords. The spam email with the subject "Urgent! Password Notice Alert!" (may vary) informs the recipien
We have examined kurepos.co[.]in and learned that it is designed to obtain permission to send notifications using misleading methods. After permission is given, kurepos.co[.]in pushes notifications containing fake alerts and other deceptive messages intended to manipulate users into interacting wi
We have inspected the website (chainflip-swap[.]com) and concluded that it is a copy of the original Chainflip platform (chainflip.io). The purpose of the fake site is to lure visitors into taking actions allowing scammers to steal their cryptocurrency holdings. Therefore, it is important to be ca
Our research team discovered the ARROW ransomware while reviewing new malware submissions to the VirusTotal site. This malicious program is designed to encrypt data and demand ransoms for the decryption. On our testing system, ARROW encrypted files and added a ".ARROW" extension to their filename
Our inspection of the email has revealed that it is a fake letter disguised as a notification from a website hosting service provider. It contains a link that leads to a phishing website created to steal personal information. Recipients should ignore such emails to avoid the associated risks.
Our analysis of faillippiterin.co[.]in reveals that its primary goal is to gain permission to display notifications. The site employs deceptive tactics to receive this permission. Once granted, it sends notifications with false warnings and other misleading messages designed to deceive users into
We have examined desocous.co[.]in and found that its purpose is to obtain permission to show notifications. This page uses a deceptive technique to achieve this. If allowed, desocous.co[.]in sends notifications containing fake warnings and other messages to trick users into interacting with them.