We have examined this email and determined that it is a phishing scam. The message poses as a security alert from an email service provider, falsely warning that the recipient's account password is about to expire. It should be ignored to avoid having email login credentials stolen. The em
We have inspected this email and determined it is a phishing scam. The message is disguised as a travel agent inquiry containing a fake document attachment, designed to trick recipients into visiting a fraudulent website that steals their email credentials. It should be ignored. The email
We have examined this email and concluded that it is a scam. The message poses as a payment failure notice from McAfee, urging recipients to update their billing details through a link that leads to a fraudulent website. This email should be ignored to avoid monetary loss and potential identity th
We have examined this email and concluded that it is a phishing scam. The message impersonates Wealthsimple, a Canadian online investment service, and falsely claims that the recipient's contact email address was recently changed. Its purpose is to trick people into visiting a fraudulent website a
HMDL is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's computer, making them impossible to open. Unlike most ransomware, HMDL does not append any extension to the files it locks. A file named 1.j
Aldet is ransomware our research team identified during a routine inspection of new submissions to the VirusTotal website. It encrypts files, appends a unique victim ID, the attackers' email address, and a ".aldet" extension to filenames, drops a ransom note, and replaces the desktop wallpaper. O
We have inspected this email and determined it is a phishing scam. The message is disguised as an official notification from Zoho, falsely claiming that a server upgrade is urgently required. Its purpose is to trick recipients into handing over their email login credentials on a fraudulent website
We have examined this email and concluded that it is a phishing scam. The message impersonates an automated IT Support notification, falsely claiming the recipient's email account is scheduled for permanent deletion. Its purpose is to trick people into entering their login credentials on a fraudul
After examining this email, we determined it is a phishing scam. The message falsely claims the recipient's email account password is about to expire and urges them to take immediate action to retain access. Clicking the link leads to a fraudulent login page designed to steal email credentials. Th
SnakeBiteAgent is a Remote Access Trojan (RAT) discovered by ANY.RUN. It hands attackers control over an infected Windows computer and bundles password theft, banking fraud, cryptocurrency theft, and live surveillance into a single tool. What makes this RAT unusual is that it does not stay comple