REVSTEALER is an information stealer designed to harvest credentials, session tokens, and sensitive data from infected Windows computers. According to research published by Elastic Security Labs, the malware is tracked internally as REF2859 and has been active for at least a year, with roughly 4,7
InWatch is ransomware discovered by our researchers while examining new submissions to the VirusTotal website. It encrypts files on the victim's computer and demands payment for decryption. On our test machine, InWatch appended the ".InWatch" extension to all encrypted files. A file originally na
We have examined this email and concluded it is a phishing scam. The message is designed to appear as an automated platform notification about updated terms of service and profile configuration. Its purpose is to lure recipients into clicking a fraudulent link where their login credentials can be
We have examined this email and determined it is a scam. The message is disguised as an official notification from DHL Express, claiming that the recipient's shipment documentation is available for download. It seeks to trick recipients into clicking a malicious link that may lead to a phishing pa
We have inspected this email and determined it is a phishing scam. The message impersonates a system notification from Zoho Workspace, falsely claiming the recipient's mailbox password has expired. It aims to steal Zoho login credentials and should be ignored. This email claims the recipie
We have examined this email and determined that it is a phishing scam. The message is disguised as a business document notification, falsely claiming the recipient has a new purchase order ready for download on a Workspace Drive. Clicking the link leads to a fraudulent website designed to steal lo
We have examined this email and determined it is a phishing scam. The message masquerades as a document portal notification, claiming the recipient has a pending agreement ready for review. Its actual purpose is to redirect victims to a fake login page and steal their email account credentials. Th
We have examined this email and determined it is a phishing scam. It poses as an automated notification from cPanel Roundcube Webmail, falsely claiming that the recipient's mailbox has failed to sync. The link inside leads to a counterfeit login page designed to steal email credentials. This messa
We have inspected this email and determined that it is a phishing scam. The message is disguised as an official WordPress notification urging recipients to confirm the contact email linked to their account. It is designed to steal webmail login credentials from unsuspecting individuals and should
We have inspected this email and determined it is a phishing scam. The message is disguised as an automated security notification from cPanel - a web hosting control panel - falsely claiming the recipient's login credentials are about to expire. It should be ignored to avoid handing account access