While investigating suspect sites, our researchers discovered this fake "SoSoValue" airdrop. This scam masquerades as the SoSoValue platform (sosovalue.com). The deceptive page uses the promise of an airdrop to lure users into exposing their digital wallets to a cryptocurrency drainer. IMPOR
We examined ecaptewos.co[.]in and found that it can show misleading notifications. The site cannot send notifications without user permission and attempts to trick visitors into allowing them. Notifications from this site may lead to scams, unwanted apps, and other risks. It is best to avoid this
Our researchers discovered this fake "SingularityNET (AGIX) Minting" webpage while investigating deceptive sites. This scam impersonates the SingularityNET network (singularitynet.io) and aims to lure users into exposing their cryptocurrency wallets to a crypto drainer. IMPORTANT NOTE: We do
We have inspected comsishago[.]com and found that it can deliver deceptive notifications. However, this page cannot send notifications without permission and uses clickbait to obtain it from visitors. Notifications from comsishago[.]com can expose users to scams, unwanted apps, and other threats.
Myth is an information stealer written in Rust programming language. The stealer is designed to target browsers built on both Gecko and Chromium engines, stealing sensitive data such as passwords, cookies, and autofill details. It also employs anti-analysis measures, including string obfuscation a
Our analysis has shown that this is a deceptive page mimicking the official XRP Ledger site (xrpl.org). It is designed to lure users into connecting their wallets to "claim XRP" (to receive a reward). The scammers behind this site aim to steal cryptocurrency from unsuspecting individuals. IM
Dire Wolf is ransomware our team discovered while examining malware samples uploaded to VirusTotal. Once executed, Dire Wolf encrypts files and appends the ".direwolf" extension to them. For example, it renames "1.jpg" to "1.jpg.direwolf" and "2.png" to "2.png.direwolf". Additionally, the ransomwa
While investigating suspect websites, our researchers discovered this fake "Multichain" page (arbiusclaim.pages[.]dev; potentially, other domains). This webpage impersonates the official Multichain website (multichain.org). The scam aims to deceive users into exposing their digital wallets to a cr
After reviewing this "Webmail Server" email, we learned that it is spam. This fake suspicious sign-in alert aims to trick recipients into visiting a phishing website that targets email account log-in credentials. It must be stressed that this message is not associated with any legitimate service p
Our inspection of the "Order Placement" email revealed that it is malspam. This message lures recipients into opening a malicious attachment by presenting it as an order placement. The goal of this campaign is to infect recipients' devices with malware. The spam email with the subject "Ref