While investigating new malware submissions to the VirusTotal website, our research team discovered the PIRAT HACKER GROUP malicious program. It is based on the Chaos ransomware. On our test machine, PIRAT HACKER GROUP encrypted files for ransom purposes. Names of the affected files were appended
Upon inspection of this "Oversea Credit Commission" email, we determined that it is spam. It states that the recipient needs to provide their personal information to have a "diplomatic consignment", which contains millions, sent to them. This phishing mail aims to obtain sensitive data and might a
Upon inspection of this "Skyborne Genesis $SKY Distribution" site, we determined that it is a scam. This fake website closely mimics the graphics and URL of the genuine Skyborne Genesis site (note other domains are not unlikely). This scheme operates as a crypto drainer – resulting in the theft of
DelphiniumElatum is an untrustworthy application identified during the analysis of a malicious installer obtained from an unreliable website. This application has the capability to activate the "Managed by your organization" feature in Chrome and Edge browsers, read diverse data, and oversee exten
CoV is ransomware belonging to the Xorist family. Cov was discovered during an analysis of samples uploaded to VirusTotal. Once a computer is infected, Cov encrypts files and appends the ".CoV" extension to filenames. Also, it changes the desktop wallpaper, presents an error message, and generates
AeR is a malicious program belonging to the Dharma ransomware family. It encrypts files and demands ransoms for their decryption. Our researchers discovered AeR ransomware during a routine investigation of new submissions to the VirusTotal site. On our test system, AeR encrypted files and altered
Upon reviewing the email, it is evident that it is a phishing attempt disguising itself as a notification from American Express regarding suspicious account activities. The scammers orchestrating this phishing scheme intend to deceive recipients into opening the provided link and divulging persona
CookiesHelper is ransomware that we discovered during inspection of malware samples submitted to VirusTotal. CookiesHelper is created to encrypt files and provide a ransom note ("FILE RECOVERY.txt") containing instructions on how to contact cybercriminals and other details. Also, CookiesHelper add
Upon examination, it has been determined that CommonValue exhibits characteristics typical of adware. When in operation, it presents users with irritating advertisements. Furthermore, this application may be crafted to collect diverse information. It is noteworthy to highlight that a majority of
Upon reviewing the "Payroll Sheet" email, we determined that it is spam. The letter claims to include access to a payroll sheet, which the recipient is requested to review and approve. However, by attempting to do so – the user is redirected to a phishing website that targets email account log-in