In the process of reviewing the malware, it became apparent that Tuborg is ransomware (not associated with the Tuborg Brewery in any way) designed to encrypt files. We discovered Tuborg ransomware while examining malware samples submitted to VirusTotal. In addition to encrypting files, Tuborg chan
During an analysis of the site (airdrop-doggotothemoon[.]xyz), it has come to our attention that it is a scam website promoting a fake Dog RuneStone airdrop (a cryptocurrency giveaway). The scammers behind this page aim to trick potential participants into believing they can receive free cryptocur
Our researchers found the mydotheblog[.]com rogue page while investigating untrustworthy websites. After inspecting it, we determined that this webpage promotes browser notification spam and redirects users to other (likely dubious/dangerous) sites. Users most commonly enter pages like mydotheblo
Upon examination, we determined that the "Quote For The Attached Products" email is spam. It is presented as a potential purchase inquiry that directs users into accessing a nonexistent attachment. The goal of the spam mail is to redirect recipients to a phishing website that targets log-in creden
After reading the "British American Tobacco Company Promotion" email, we determined that it is spam. The scam letter claims that the recipient was selected as a winner in a promotion supposedly held by the British American Tobacco company. It must be stressed that this prize is nonexistent, nor h
After investigating this "$SAFE Token Airdrop", as promoted on the blackpanther-claim[.]network webpage, we determined that it is a scam. It imitates the Safe platform (safe.global) running an airdrop with the goal of luring victims into exposing their digital wallets to a cryptocurrency drainer.
While inspecting unreliable sites, our researchers discovered the thaksaubie[.]com rogue webpage. It seeks to deceive users into allowing the delivery of spam browser notifications. Thaksaubie[.]com can also redirect users elsewhere (likely untrustworthy/dangerous websites). Most visitors stumble
Our research team discovered the mypholasshop[.]com rogue page while browsing suspect websites. Upon investigation, we learned that it promotes browser notification spam and generates redirects to other (likely dubious/malicious) sites. Users primarily access webpages like mypholasshop[.]com via
Phaliconic[.]com is the address of a rogue page discovered by our research team during a routine investigation of untrustworthy websites. After examining this webpage, we determined that it promotes browser notification spam and redirects users to other (likely unreliable/hazardous) sites. Most v
We have examined the web page (portal-gaming-project.pages[.]dev) and discovered that it is a scam page imitating the Portal Web3 gaming platform (portalgaming[.]com). Scammers behind this fraudulent website seek to trick unsuspecting individuals into performing actions enabling scammers to steal