After inspecting this email, we determined that it is malspam. The message pretends to be a shipment notification from DHL Express, urging recipients to open an attached file that supposedly contains shipping documents. In reality, the attachment is designed to deliver malware, so the email should
After inspecting this email, we determined it is a phishing scam. The message is disguised as a notification from DocuSign, a legitimate electronic signature service, claiming the recipient has a document pending review and signature. Clicking the link inside leads to a fake email login page desig
We have examined this email and concluded it is a phishing scam. It poses as an automated notice from cPanel Webmail support, falsely claiming the recipient must update their email credentials or lose mailbox access. This email should be ignored. The email claims the recipient's mailbox wi
Rokarolla is a banking trojan targeting Android devices. It abuses Accessibility Services to take near-complete control of infected phones and steal banking and cryptocurrency credentials. Rokarolla was first analyzed by Zimperium researchers Vishnu Pratapagiri and Fernando Ortega. In the
CRIMSON is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts victims' files and demands payment in exchange for decryption. After completing encryption, the ransomware presents its ransom demands in a full-screen message.
macOS.Gaslight Backdoor is a backdoor written in the Rust programming language that also carries information-stealing functionality. It targets Mac operating systems and gives attackers the ability to run commands remotely while quietly collecting data from the infected device. According to rese
We have examined this email and determined that it is a phishing scam. The message poses as an urgent notice from a bank official claiming a payment was sent to the wrong account and requesting the recipient to open an attached PDF. The link inside the PDF leads to a fraudulent website designed to
We have inspected this email and determined it is a phishing scam. It poses as a security notification from an email service provider, falsely claiming a new device has accessed the recipient's account. The purpose is to direct victims to a fake login page and steal their credentials. This email s
We have inspected this email and determined that it is malspam. It is disguised as a message from a hotel guest asking about a room upgrade tied to a Trip.com booking, but its real purpose is to trick the recipient into downloading a malicious file. It should be ignored and deleted. The em
We have analyzed this email and determined it is malspam. Disguised as a shipping document update from a freight forwarding company, it carries a malicious Microsoft Excel attachment designed to install malware. This email should be deleted without opening any files it contains. The email