SAMURAI-SEC is ransomware that we found while examining new malware samples submitted to VirusTotal. It is based on the Chaos ransomware family. This malware encrypts files and demands payment for decryption. It also steals data before locking files, threatening to publish it unless the ransom is
We have examined this email and determined it is a phishing scam. The message impersonates DocuSign, falsely claiming that someone sent the recipient PDF documents to review and sign. The link leads to a fake login page designed to steal email account credentials. This message should be ignored.
ByteBane is ransomware that we discovered while examining new malware samples submitted to the VirusTotal website. It encrypts files, appends the .bytebane extension to their filenames, changes the desktop wallpaper, and drops a ransom note in a text file named README.txt. The ransomware also clai
MAJIN ransomware is ransomware our research team identified while examining new malware submissions on VirusTotal. It encrypts victims' files, exfiltrates sensitive data from the affected network, and threatens to publish stolen information publicly unless a ransom is paid. On our test machine, t
We have inspected this email and determined it is a phishing scam. It is disguised as an automated storage alert from cPanel Roundcube webmail, urging recipients to log in through a fraudulent link. Its purpose is to steal email login credentials. This email should be ignored and deleted without c
We have examined this email and determined that it is a phishing scam. The message impersonates ShareFile, a legitimate secure file-sharing service, and falsely claims a purchase order document has been shared with the recipient. It is designed to steal email login credentials and should be ignore
We have inspected this email and determined it is malspam. The message poses as a payment receipt notification and contains a link leading to a fraudulent webpage impersonating Adobe Acrobat, which delivers a malicious remote access trojan to the victim's device. This email should be ignored and d
We have inspected this email and determined that it is a phishing scam. Disguised as an urgent storage warning from a "System Administrator," it falsely claims the recipient's webmail account is about to be deleted and urges them to upgrade their plan. The email directs users to a fake login page
We have examined this email and determined that it is a phishing scam. The message poses as an urgent administrative notification from the recipient's email service provider, falsely claiming that DNS activation is needed to restore normal message delivery. It is designed to steal email login cred
We have examined this email and concluded it is a scam. The message poses as an urgent McAfee payment notification, falsely claiming the recipient's antivirus subscription payment has failed. The goal is to push recipients toward fraudulent websites where their payment details can be stolen. This