While browsing suspicious websites, our researchers discovered this fake "Tharwa Rewards Update" page. Upon inspection, we determined that it operates as a cryptocurrency drainer, i.e., by siphoning funds from compromised digital wallets. Users are lured into exposing their wallets by attempting t
During a routine investigation, our research team discovered this fake "$HIGHER Token" airdrop. This scam operates as a cryptocurrency drainer – by siphoning funds from exposed digital wallets. Essentially, victims of the "$HIGHER Token Airdrop" scam experience financial loss. IMPORTANT NOTE
Our researchers discovered this fake "Camp Network ($CAMP)" airdrop during a routine investigation. The fraudulent webpage is not associated with the real Camp Network (campnetwork.xyz). Once a user attempts to check their eligibility for this bogus airdrop, they are deceived into exposing their c
Mythilshape[.]top is a rogue webpage that promotes browser notification spam and redirects users to different (likely unreliable/hazardous) sites. The majority of visitors to such pages access them through redirects produced by websites employing rogue advertising networks. Our researchers discov
Our researchers discovered this "ETH Airdrop Portal" during a routine investigation. Upon further inspection, we determined that it is a phishing scam. It runs a fake airdrop in which eligible users can claim a ludicrous amount of Ethereum cryptocurrency (ETH). The goal is to trick victims into re
While investigating suspicious sites, our researchers discovered this fake "Bittensor (WTAO)" airdrop. This scam is not associated with the actual Bittensor network website (bittensor.com). When users attempt to participate in this limited-time event, they are deceived into exposing their cryptowa
TamperedChef is the name of a malicious program classified as a stealer. As the classification implies, this software exfiltrates vulnerable information from infected systems. This malware has been around since at least May 2025. In recent campaigns that took place during the summer of the same y
Our research team found SolutionWeHave while investigating new malware submissions to the VirusTotal platform. The program belongs to the MedusaLocker ransomware family. This malware is designed to encrypt data and demand payment for the decryption. Once we executed a sample of this ransomware on
While browsing suspect sites, our researchers discovered the myscads[.]com rogue webpage. The purpose of this page is to trick visitors into consenting to its browser notification delivery. It can also redirect them to different (likely unreliable and/or hazardous) websites. Myscads[.]com and web
Our research team discovered muheodeidsoan[.]info while investigating untrustworthy websites. Upon examination, we determined that this rogue webpage promotes dubious content and browser notification spam. It can also redirect users to different (likely unreliable/hazardous) sites. Muheodeidsoan[