SPICA is the name of a backdoor-type malware. This malicious program is written in the Rust programming language. Software within this classification stealthily opens a "backdoor" to targeted machines, typically in order to cause further infection. SPICA has been in use since September 2023, but
In this article, we provide a review of deceptive notifications (fake warnings, alerts, and similar messages) posing as legitimate notifications from the operating system or security software. These deceptive notifications come from unreliable pages and often serve as gateways to scam websites des
While inspecting new file submissions to the VirusTotal site, our researchers discovered the Wessy ransomware. Malware within this classification encrypts data to make ransom demands for its decryption. After we executed a sample of Wessy on our testing system, it encrypted files and appended the
While assessing the application, it became evident that Conquerable.app is an ad-supported app linked to the Pirrit family. Conquerable.app displays intrusive advertisements and has the potential to collect personal information. Typically, applications of this nature, such as Conquerable.app, ar
During our inspection, we came across the finding that PantheraLeo is an unreliable extension distributed via a malicious installer. Once added to a browser, PantheraLeo activates the "Managed by your organization" feature (it can control this setting on Chrome and Edge browsers). Also, PantheraLe
Upon scrutinizing the email, it became evident that it conforms to the characteristics of a common phishing attempt. The scammers orchestrating this scheme seek to deceive recipients by enticing them to click on the provided link, ultimately coercing them into revealing sensitive personal informat
In the process of reviewing the app, it became apparent that Unorthodoxly.app is an advertising-supported app associated with the Pirrit family. Unorthodoxly.app exhibits intrusive advertisements and may gather personal information. Usually, apps like Unorthodoxly.app are distributed using dubio
"New Purchasing Document" is a spam email that promotes a phishing scam. The letter is presented as a notification regarding a file sent to the recipient. This spam mail aims to deceive users into disclosing their email account log-in credentials (passwords). The spam email with the subjec
"AltLayer Token Airdrop" is a scam. It is presented as a cryptocurrency airdrop distributing the ALT Token released by the AltLayer company. However, after a user exposes their digital wallet through the scheme – it starts operating a cryptocurrency drainer. Hence, victims of "AltLayer Token Airdr
Our research team discovered an installation setup containing the Columbiformes browser extension during a routine investigation of suspect sites. This piece of malicious software targets Google Chrome and Microsoft Edge browsers. Columbiformes is capable of modifying the software and collecting b