MAJINAHANASHI is ransomware our researchers discovered while examining new malware samples submitted to VirusTotal. It encrypts files, appends the .majin extension to their names, and drops a ransom note in a text file named README.txt. The attackers also claim to have stolen a copy of the victim'
Fake Xeno is a multi-stage trojan that delivers a combined information stealer and Remote Access Trojan (RAT). It is disguised as a "Xeno" Roblox script executor - a cheat tool promoted through gaming forums and Discord servers. As documented by Bitdefender, the malware (also identified as "Power
We examined this email and determined it is a scam. The message impersonates Citibank International PLC and falsely claims the recipient has an $850,000,000 compensation fund waiting for transfer. There is no such fund. The scammers behind it seek to harvest personal details and, over time, extrac
We have examined this email and determined it is a phishing scam. It masquerades as an urgent security notice from an email service provider, pressuring recipients into clicking a link that leads to a fake login page. Anyone who submits their credentials on that page hands them directly to the sca
We examined this email and determined it is a phishing scam. The message poses as a billing reminder and uses an HTML file attachment that, when opened, displays a fake Microsoft login page designed to steal account credentials. The email should be ignored and the attachment deleted without openin
We have examined this email and determined it is a phishing scam. It poses as an automated system notice from an email service provider, falsely claiming that the recipient's mail account requires an update or it will be suspended. The goal is to trick users into handing over their email login cre
We examined this email and determined it is a scam. The message is designed to look like an official billing notification from OpenAI, claiming the recipient has an outstanding payment for their ChatGPT Plus subscription. It is a phishing email intended to trick recipients into entering payment ca
We have examined this email and determined that it is a phishing scam. The message is crafted to appear as an urgent notice from the recipient's email service provider, falsely claiming that inactive accounts are scheduled for deletion. Its goal is to trick recipients into submitting their login c
After reviewing this email, we determined it is malspam. The message is disguised as a payment receipt from Intuit QuickBooks to persuade recipients into clicking a fraudulent link. That link leads to a fake Adobe download page that delivers a malicious file. This email should be ignored and delet
WindRelay is a specialized NFC relay malware targeting Android users across Central Europe. Working in tandem with SpyNote, a Remote Access Trojan, it captures contactless payment card data and streams it to attackers in real time. According to research by Group-IB, the malware has been active sin