LLHN Stealer is an information stealer - a type of malicious program designed to silently harvest sensitive data from infected Windows computers. It targets saved browser credentials, session cookies, platform tokens, cryptocurrency wallet data, and more, before sending everything to the attacker.
Manic is an Android banking trojan that also incorporates spyware and remote access capabilities. It targets users of over 169 financial, government, payment, and cryptocurrency applications. The malware was first analyzed by ThreatFabric, a mobile threat intelligence firm, with findings reported
We have examined this email and concluded that it is a phishing scam. The message is disguised as a security notification urging recipients to review their account activity, but the link leads to a fake login page designed to steal email credentials. This email should be ignored. The "Secu
We have inspected this email and determined it is a phishing scam. It is disguised as a Microsoft 365 voicemail notification, falsely claiming the recipient's accountant left a recorded message. The goal is to trick recipients into clicking a link that leads to a fake login page designed to steal
We have examined this email and determined it is a phishing scam. It poses as an automated notification from the recipient's email system administrator, falsely warning that incoming messages have been delayed due to a server error. Its goal is to lure recipients into entering their email login cr
We have examined this email and determined that it is a phishing scam. The message falsely claims that the recipient's Microsoft email account is about to expire and must be reactivated immediately. Clicking the button leads to a fake login page that harvests email credentials. This email should b
KIMO is ransomware our researchers discovered while analyzing new malware samples submitted to VirusTotal. It encrypts files using AES-256-CTR and appends the .KIMO extension to every file it locks. On our test machine, this ransomware encrypted files and appended the .KIMO extension to their fil
KarryTech is ransomware that our researchers discovered while examining new file submissions on VirusTotal. It encrypts files stored on the victim's machine and demands payment in exchange for a decryption tool. On our test machine, KarryTech appended each encrypted filename with a unique victim
Betelgeuse is ransomware our team discovered during a routine inspection of new submissions to the VirusTotal website. It targets company networks, encrypts files, and demands payment in exchange for a decryption key. It also claims to exfiltrate sensitive data before encryption, threatening to re
We have inspected this email and determined it is a phishing scam. The message impersonates a generic email server verification notice and directs recipients to a fraudulent website built to steal their login credentials. It should be ignored and deleted without interacting with any of its links.