X2anylock is ransomware, potentially based on Lockbit 3.0 (another ransomware). It encrypts files, drops a ransom note ("How to decrypt my data.txt"), and appends the ".x2anylock" extension to files. For instance, it changes "1.jpg" to "1.jpg.x2anylock" and "2.png" to "2.png.x2anylock". Screen
We have examined the site (claim.kiloex[.]rest) and concluded that it is a scam designed to trick individuals into believing they can claim free cryptocurrency by connecting their crypto wallets. The purpose of this scam site is to steal cryptocurrency from victims. It should not be trusted and sh
Our researchers discovered the "WhiteRock ($WHITE) Proposal" scam while investigating dubious websites. This scam masquerades as the WhiteRock (whiterock.fi) platform. It operates as a cryptocurrency drainer (by siphoning digital assets) and lures victims into exposing their wallets with a poll co
We have reviewed ablebass.co[.]in and found that it employs a deceptive tactic to lure visitors into agreeing to receive its notifications. Once permission is granted, ablebass.co[.]in sends notifications containing links to various scam websites and other unreliable sites. Users should not allow
Our inspection has shown that this is a fake website (claim.aave-io[.]org) imitating the Aave cryptocurrency lending and borrowing platform (app.aave.com). It is designed to deceive users into participating in a fake airdrop (giveaway). Victims of this scam can lose their cryptocurrency holdings.
Our discovery of Gnsyihong occurred during an inspection of malware samples submitted to VirusTotal. We found that Gnsyihong is ransomware that encrypts files and appends the victim's ID and ".gnsyihong" to them. It also drops the "README.TXT" file containing a ransom note. Gnsyihong is identical
The "Claim KAITO" scam imitates the Kaito AI platform (kaito.ai). It entices users to expose their digital wallets to a cryptocurrency drainer by promoting a fraudulent KAITO token airdrop. Victims of this scam have their digital assets siphoned from their wallets – thus, they can experience a sig
After examining this "LinkedIn Message Notification" email, we determined that it is fake. It is presented as a notification concerning a LinkedIn message about a potential purchase. This email promotes a phishing website that targets email account log-in credentials (passwords). This spam
Upon reading this "United Nations - Scam Victim Compensation" email, we determined that it is spam. This is a phishing scam that targets recipients' personal information by claiming that they will be reimbursed nine hundred thousand USD from a fund for scam victims. It must be emphasized that thi
While examining questionable reputation websites, our researchers found the apptrue[.]monster rogue page. Upon inspection, we learned that it promotes deceptive content and browser notification spam. This webpage can also produce redirects to other (likely untrustworthy/hazardous) sites. Most vis