While investigating suspicious websites, our research team came across corematrixpin[.]com. After examining this rogue page, it became clear that it attempts to trick visitors into enabling browser notifications. Once permission is granted, the site delivers a stream of deceptive alerts and potent
Our analysis revealed that ascendscaleforge[.]com is a rogue webpage that uses a fake CAPTCHA to trick visitors into allowing browser notifications. The page presents a phony "I'm not a robot" verification step to make the request seem legitimate. If notifications are allowed, ascendscaleforge[.]c
We have examined this email and determined it is a scam. It falsely presents itself as an official government notice informing recipients that business owners worldwide are eligible for a $2.7 million compensation payout. There is no such program - this is an advance-fee fraud designed to harvest
We have inspected this email and determined that it is malspam. The message poses as an official DocuSign notification, claiming a payment document has been shared with the recipient, to trick them into clicking a malicious link. That link delivers a trojanized remote desktop tool installer that h
BLACKNET is ransomware that we discovered while examining malware samples submitted to VirusTotal. It encrypts files on the victim's device, replaces the desktop wallpaper with a ransom message, and delivers additional demands through a pop-up window and a text file. On our test machine, BLACKNET
Search Webo is a browser extension that our researchers classified as a browser hijacker. Once installed, it changes browser settings to promote searchwebo.com, a fake search engine. During installation, Search Webo asks for permission to read browsing history and to change the browser's search s
DenoRAT is a Remote Access Trojan (RAT) that also steals information from infected computers. It is written in Deno JavaScript and consists of over 10,000 lines of code, much of it obfuscated to resist analysis. According to research published by eSentire, DenoRAT is part of the toolkit used by a
We have inspected the email and found that it contains a fake notification claiming a policy violation was detected on the recipient's email account. It is a phishing email designed to steal email login credentials from unsuspecting individuals. It should be ignored to avoid having the account hij
We have inspected this email and determined that it is a phishing scam. The message is disguised as a security notification from Truist, falsely claiming that unusual activity has been detected on the recipient's account. Its goal is to trick users into clicking a link that leads to a fraudulent w
Our research team found the risecoregrowth[.]com rogue page while investigating suspicious websites. After inspecting this webpage, we determined that it uses a fake CAPTCHA check to trick visitors into allowing browser notifications. If granted permission, risecoregrowth[.]com delivers misleading