ZAWOOO is ransomware our research team discovered while examining new malware samples submitted to VirusTotal. It encrypts victims' files and renames them to random strings, replacing both the original filename and extension with random characters. The attackers also threaten to leak stolen data t
Montage is a ransomware-type program that we found while inspecting new submissions to the VirusTotal website. It encrypts files, appends its own extension to their names, and drops a ransom note. Montage is identical to Developer and Friends ransomware. On our test machine, this ransomware encry
We have examined this email and determined that it is a scam. The message is disguised as a billing notice from ChatGPT claiming that a subscription payment could not be processed. Its purpose is to lure recipients onto a fraudulent website where their account credentials and card details can be s
After examining this email, we determined that it is a phishing scam. The message poses as an automated security notification from the recipient's email service provider, falsely warning that their password is about to expire. The goal is to trick users into clicking a fraudulent link and entering
After inspecting this email, we concluded it is a scam. It poses as an official compliance notice from "Blockchain Phantom Wallet" and falsely claims the recipient has over $1.2 million waiting in their account. The scammers behind it want to trick people into sending money and handing over sensit
We have examined this email and determined that it is a phishing scam. The message poses as a security alert claiming that an unrecognized sign-in was detected on the recipient's account. Its goal is to trick recipients into entering their email credentials on a fake login page. This email should
We have examined this email and determined it is a scam. It impersonates the Social Security Administration (SSA) and falsely claims that unauthorized changes were made to the recipient's account contact information. Recipients are urged to download a report that may install malware or lead to a p
We have examined this email and concluded that it is a phishing scam. It poses as a legitimate business quotation request from a company representative, with a link that leads recipients to a fake document portal designed to steal login credentials. This email should be ignored to avoid having you
We have examined this email and determined that it is a phishing scam. The message is disguised as a notification from DocuSign, falsely claiming that a document has been added to the recipient's account. Its actual purpose is to steal email login credentials. This email should be ignored.
We have reviewed this email and determined that it is malspam. The message impersonates Adobe, falsely claiming the recipient has two outstanding invoices requiring immediate review. Clicking the link inside leads to a fraudulent download page that pushes a malicious batch file onto the victim's c