While investigating suspicious websites, our research team discovered the verifytechclusterssecure.co[.]in rogue page. It operates by promoting browser notification spam and redirecting visitors to different (likely unreliable/hazardous) sites. Most users enter verifytechclusterssecure.co[.]in and
Loapneme.co[.]in is a rogue webpage discovered by our researchers during a routine inspection of untrustworthy sites. This page promotes browser notification spam and generates redirects to other (likely unreliable/harmful) websites. Most visitors to loapneme.co[.]in and similar webpages access th
Our researchers discovered this fake "Goat Network" airdrop while inspecting dubious websites. The scam lures users with a bogus rewards program into exposing their cryptowallets to a cryptocurrency drainer. It must be emphasized that this fraudulent airdrop is not associated with the actual GOAT
Datzbro is a malware classed as a banking trojan. This malicious program is designed to infect Android devices. It has many harmful capabilities, including those associated with remote access/control, spying, and financial fraud. Datzbro's code suggests that its developers were Chinese speakers.
Acreed is an information stealer that has become the third most widespread of its kind, while Lumma now shares the top position with Rhadamanthys. It primarily collects passwords, browser cookies, and autofill data. Acreed also seems to target cryptocurrency wallets, credit cards, and messaging ap
During a routine investigative session, our researchers discovered this fake "Monero" site (monero-wallet[.]io; other domains are possible). It impersonates the official website of the Monero (XMR) cryptocurrency (getmonero.org). Upon examination, we determined that this is a phishing scam targeti
Our inspection of the "Email On Hold" message revealed that it is spam. It informs the recipient that over a dozen messages failed to reach their inbox. With this lure, this phishing campaign aims to trick recipients into disclosing their email account log-in credentials. The spam email wi
Our inspection of securetechworkflow.co[.]in has shown that the site uses clickbait to deceive visitors into permitting it to send notifications to their devices. Once allowed, securetechworkflow.co[.]in can show notifications containing fake warnings and other misleading content. Thus, this page
Our analysis of koilur.co[.]nz shows that it uses clickbait to trick users into agreeing to get its notifications. Once allowed, the site can deliver fake alerts, promotions, and other misleading messages that link to potentially dangerous pages. For these reasons, koilur.co[.]nz should not be tru
We have reviewed the page (claim-aethircloud[.]com) and found that it closely resembles the original Aethir website, aethir.com. Its purpose is to trick visitors into believing that they can receive rewards by connecting their wallets. However, victims of this scam receive no rewards and can suffe