Moroccan Dragon is the name of a ransomware-type program. It is designed to encrypt files and demand payment for the decryption. On our testing system, Moroccan Dragon encrypted files and appended their names with a ".vico" extension. To elaborate, an original filename like "1.jpg" became "1.jpg.
After inspecting this "Payment Schedule Document" email, we determined that it is spam. This message claims that the recipient was sent a document detailing the payment schedule for the month. This email is fake, and its goal is to lure victims into visiting a phishing website that targets account
PlayPraetor is a trojan-type malware targeting Android devices. It is a multi-functional program capable of stealing a wide variety of information from compromised systems. PlayPraetor has been spread through a massive campaign utilizing fake Google Play Store webpages. PlayPraetor is prol
We have inspected bedoq[.]info and learned that its purpose is to deceive visitors into agreeing to receive its notifications. Once this is achieved, bedoq[.]info sends dubious notifications to promote other potentially malicious websites. Users should avoid bedoq[.]info and never permit it to sho
We have reviewed cqwyjj[.]click and determined that it is a deceptive site created to manipulate visitors into granting permission for notifications. Once permission is given, cqwyjj[.]click displays misleading notifications that promote other questionable websites. Therefore, this site should be
KoSpy is spyware targeting Android users who speak Korean and English. It masquerades as utility apps, employs a two-stage C2 infrastructure, and gathers a wide range of data from compromised devices. The malware is distributed through Google Play and third-party app stores such as APKPure.
Upon reading this "Transfer On Death" email, we determined that it is spam. This message is a supposed proposal to add the recipient to a deceased client's insurance policy, thus enabling them to take possession of the Transfer On Death (TOD) deed. In other words, the scheme is to divide between
We have inspected sayadsleads[.]top and found it to be a misleading website designed to trick visitors into granting it permission to show notifications. Once sayadsleads[.]top has this permission, it displays deceptive notifications to promote other dubious websites. Thus, this site should be avo
Our analysis of Tab Of Nature has shown that it is a browser extension that hijacks a web browser. The extension achieves this by changing the settings within a browser. Users often add browser hijackers unintentionally, and it is advisable to avoid using such extensions to prevent potential priva
Exo Stealer is an information stealer, a type of malware designed to extract sensitive data from infected devices. Once active, it transmits stolen data to cybercriminals, who can then misuse it for malicious purposes. Usually, malware of this type targets login credentials, financial details, and