Our research team discovered avgs[.]fun while inspecting dubious websites. After reviewing this rogue page, we learned that it promotes scams and spam browser notifications. Additionally, it can redirect users to other (likely untrustworthy/dangerous) sites. Visitors to avgs[.]fun and similar web
We have identified that this email is a deceptive message masquerading as a notification concerning the security of the recipient's NFT account. Email of this type, categorized as phishing scams, are designed by scammers to trick recipients into revealing sensitive information. It is recommended t
We have reviewed the email and determined that it is a scam disguised as a notification regarding an award. This type of email is known as a phishing email, and the scammers behind it aim to steal sensitive information and (or) money from recipients. Therefore, this email should be ignored and del
After examining the "A Team Member Shared An Item" email, we learned that it is spam. This mail aims to deceive recipients into disclosing their email account log-in credentials to a phishing site – disguised as a sign-in page – by claiming they must do so to access a document sent to them.
Senanam is ransomware that our team discovered while inspecting malware samples uploaded to VirusTotal. It is designed to encrypt files, append the ".senanam" extension to filenames, create a ransom note ("READ_IT.txt"), and change the desktop wallpaper. An example of how Senanam changes filenames
Our researchers discovered 2000USD ransomware during a routine inspection of new submissions to the VirusTotal website. Malicious software within this category is designed to encrypt data and demand payment for its decryption. After we launched a sample of 2000USD on our test machine, it encrypte
Based on our examination, PromoteMemory operates as adware, displaying intrusive advertisements and potentially possessing additional functionalities. Such applications are typically distributed through deceptive tactics to trick users into installing them. It is advisable to remove adware like
ROD (Rodmacer) is an information stealer designed to extract data from compromised macOS systems. Once the information is gathered, it can be transmitted to remote servers controlled by cybercriminals, who may use it for various malicious purposes. Victims should remove the ROD stealer from comp
Our examination of the page (galaxyfoxclaim.pages[.]dev) has shown that it is a fraudulent website mimicking the Galaxy Fox platform (galaxyfox[.]io). Scammers behind this fake web page aim to trick unsuspecting individuals into taking actions that would cause them financial losses. Thus, this sit
Upon inspection of a browser extension called "A cool tab", we determined that it is a browser hijacker. The extension modifies browser settings to generate redirects that land on the search.mycooltab.com fake search engine. Typically, browser-hijacking software makes changes to browsers'