MODBEACON is a Remote Access Trojan (RAT) that lets a remote operator secretly access an infected Windows computer, run commands, and load extra plugins while staying hidden in memory. According to research published by Qianxin Threat Intelligence Center, MODBEACON is used in a campaign the resea
SCMBANKER Trojan is a banking trojan built in PowerShell and aimed at users of Mexican financial institutions. According to research by Elastic Security Labs, it is part of an active, operator-assisted fraud campaign tracked as REF6045. The malware is delivered through ClickFix fake CAPTCHA pages
While examining suspicious websites, our team inspected paxolaunch[.]live and found that it promotes a fake cryptocurrency token launch. The page targets holders of Pax Gold (PAXG), falsely claiming they can claim a new token called "$PAXOS." In reality, it is a cryptocurrency drainer scam designe
We have examined this email and concluded that it is a phishing scam. The message impersonates the recipient's email service provider and falsely claims there are unresolved inbound messages requiring immediate attention. Its goal is to steal email login credentials through a fraudulent website. T
We have examined this email and determined it is a phishing scam. The message impersonates DHL Express with a fake shipment notification, then directs recipients to a fraudulent website designed to steal their login credentials. This email should be ignored to avoid exposing personal account infor
We examined this email and found it to be a phishing scam. The message falsely claims the recipient's mailbox has been restricted and urges them to verify their email account. It is designed to steal login credentials and should be ignored. The email arrives with a subject line warning of
We examined this email and determined it is a phishing scam. It falsely claims the recipient's email account requires verification to maintain access, then directs them to a fraudulent login page built to steal credentials. This email should be ignored. The email arrives with the subject l
We have inspected this email and determined it is a phishing scam. The message impersonates a Microsoft SharePoint notification, falsely claiming that a document has been added to the recipient's workspace. It is designed to steal login credentials and should be ignored to protect your account.
We have inspected this email and determined it is a phishing scam. The message is disguised as a warning from a web administration team, falsely claiming the recipient's email account faces termination over a spam rules violation. It aims to steal email login credentials through a fraudulent websi
We have examined this email and determined it is a scam. The message impersonates Polymarket, a legitimate prediction market platform, claiming the recipient has been invited to join a UFC 329 event market. Clicking the link leads to a fraudulent website designed to drain connected cryptocurrency