HostaSieboldiana is a malicious browser extension that our researchers discovered in an installer promoted by a deceptive webpage. This piece of software has a variety of harmful capabilities, including data tracking. It is noteworthy that setups like the one endorsing this extension can be bundl
After inspecting this "Chase Bank Invoice" email, we determined that it is spam. It is disguised as an invoice sent by the Chase Bank. The goal is to get recipients to call the fake support line with the intention of reversing the purchase transaction. After calling, the scam aims to deceive victi
Upon inspecting a malicious installer, we discovered an unreliable app called PelargoniumHortorum. We found that this app can read data on all websites, manage themes and extensions within the affected browser, and enable the "Managed by your organization" feature in Chrome and Edge browsers. It i
Our research team found Mesmerised ransomware while reviewing new file submissions to the VirusTotal website. This piece of malicious software is designed to encrypt files and demand ransoms for the decryption. On our testing system, Mesmerised encrypted files and altered their filenames. To elab
While investigating suspicious sites, our research team discovered a webpage promoting a fake software "crack". From this page, we downloaded an installation setup containing a Potentially Unwanted Application (PUA) called Mantras_and_meditations_for_groups. It is pertinent to mention that this in
We have determined that this email is a phishing attempt orchestrated by scammers. The fraudulent intent is to entice recipients to access a deceptive website and divulge personal information. The phishing email disguises itself as a communication from Alibaba, a legitimate Chinese multinational t
Upon investigation of gebehee[.]top, it was observed that the website presents users with a deceptive survey and requests permission to send notifications. Additionally, gebehee[.]top redirects visitors to other questionable websites. As a result, users are strongly advised to refrain from visitin
This "AppleCoin" platform is a scam. It operates as a crypto drainer, i.e., empties the cryptocurrency stored in wallets connected to it. This "AppleCoin" scheme has been observed being endorsed by posts made on the X (more commonly known by its former name – Twitter) social media platform.
PureLand is a stealer-type malware targeting Mac devices. Programs within this classification are designed to steal information from infected systems. PureLand targets cryptocurrency wallets and other sensitive data. This malware has been observed being spread under the guise of a Play-to-Earn
PDFsharp seems to be a tool designed for handling PDF files. Yet, upon thorough examination, it emerges as an unreliable application with an unclear purpose. Additionally, it comes bundled with other dubious apps - it gets installed together with other suspicious elements. Consequently, it is stro