We examined this email and determined it is a phishing scam. It impersonates Wells Fargo and falsely informs recipients that a disputed payment has been credited to their account. The message leads to a fake Wells Fargo login page designed to steal banking credentials. This email should be ignored
We have inspected this email and determined it is malspam. The message impersonates the Internal Revenue Service and claims the recipient's recent tax filing requires additional identity verification. Clicking the link inside leads to a malicious website that automatically downloads a trojanized r
After examining this email, we concluded it is a phishing scam. The message poses as an automated server notification claiming the recipient's email account has a POP3 error requiring immediate verification. Its purpose is to trick recipients into entering their email login credentials on a fraudu
Twitch Enhanced Viewer | JeetBot malicious extension is marketed as a browser extension that enhances the Twitch viewing experience. It promises features such as 1080p/2K streaming, ad blocking, and automatic channel point collection. According to research published by Socket, this extension secre
Sword is a piece of ransomware that our researchers came across while inspecting new samples submitted to VirusTotal. It encrypts files, drops 20 copies of a text-based ransom note on the desktop, and locks the screen with a full-screen message. The lock screen comes back roughly 10 seconds after
Vricpe is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's device and demands payment in exchange for the decryption key. On our test machine, Vricpe entirely replaced each file's original name wit
We have examined this email and determined it is a phishing scam. Despite claiming to be part of a corporate security-awareness exercise, the message is designed to trick recipients into entering their email login credentials on a fraudulent webmail login page. The email should be ignored and dele
We have examined this email and determined it is a phishing scam. It is disguised as an automated alert from an email service provider, falsely claiming that the recipient's mailbox has not been synchronized and requires an update. This email should be ignored - clicking the link within it risks e
We have examined this email and concluded that it is a phishing scam. The message impersonates NetZero, a legitimate internet service provider, and falsely claims the recipient's email account needs an urgent update. Its goal is to steal email login credentials through a fraudulent website. This e
Face Melter is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files, appending the .facemelter extension to their filenames, changes the desktop wallpaper, and creates a ransom note in a text file named README_DONOTREM