Our research team found a ransomware named "Virus" while inspecting new submissions to the VirusTotal site. This malicious program is part of the MedusaLocker ransomware family. We acquired a sample of Virus (MedusaLocker) ransomware and executed it on our testing system. The malware encrypted fi
In our analysis of robustsearch.io, we found that it is linked to fake search engines and browser hijackers. Typically (but not always), robustsearch.io acts as an endpoint in redirection chains initiated by third-party extensions. Therefore, users who encounter redirects to robustsearch.io should
Upon thorough examination of maticfaled[.]cloud, it became evident that it operates as a deceptive webpage with the intention of deceiving users. The site presents itself as a platform where users can receive Matic cryptocurrency by completing specific actions. Scammers use this page to steal cryp
Our examination of precludestore[.]com shows that it is a deceptive website crafted to deceive visitors into consenting to receive notifications. Furthermore, precludestore[.]com might redirect visitors to similar deceptive websites. Therefore, it is advisable to avoid visiting precludestore[.]com
During our examination of msgmixesco[.]com, we found that the site attempts to deceive visitors into taking specific actions. Additionally, msgmixesco[.]com can redirect users to other untrustworthy websites. Therefore, it is advisable to steer clear of msgmixesco[.]com and similar pages.
During our examination of the $PANDORA Airdrop, we discovered it to be a fraudulent operation disguised as an authentic cryptocurrency giveaway. The perpetrators behind this scam seek to deceive unsuspecting individuals into believing that participation will grant them access to free $PANDORA toke
Our analysis of the site (app.gas-back[.]xyz) determined that it is a scam website masquerading as a legitimate platform. The site's design and content are crafted to appear legitimate, enticing visitors with promises of compensation in digital currency. However, the true purpose of app.gas-back[.
After inspecting the "AVIATOR AIRDROP", we determined that it is a scam. This AVI token giveaway is supposedly run on the official AVIATOR platform (aviator.ac). When users attempt to participate in this airdrop, they are asked to connect their digital wallets. Once "connected", the scam begins op
"ChainGPT DAPP" is a scam that mimics the ChainGPT platform (chaingpt.org). This scheme operates as a cryptocurrency drainer; when users link their digital wallets – it begins siphoning funds from them. The scam impersonates ChainGPT – an AI (Artificial Intelligence) model that implements
Upon inspection, we determined that this "NexAI Migrate" platform is fake. The scam is presented as a trading system. Users lured into interacting with this fraudulent platform expose their cryptowallets to a cryptocurrency drainer. This scam claims to be "NexAI x AI-WAY - LTF Trading Syst