ByteBane is ransomware that we discovered while examining new malware samples submitted to the VirusTotal website. It encrypts files, appends the .bytebane extension to their filenames, changes the desktop wallpaper, and drops a ransom note in a text file named README.txt. The ransomware also clai
MAJIN ransomware is ransomware our research team identified while examining new malware submissions on VirusTotal. It encrypts victims' files, exfiltrates sensitive data from the affected network, and threatens to publish stolen information publicly unless a ransom is paid. On our test machine, t
We have inspected this email and determined it is a phishing scam. It is disguised as an automated storage alert from cPanel Roundcube webmail, urging recipients to log in through a fraudulent link. Its purpose is to steal email login credentials. This email should be ignored and deleted without c
We have examined this email and determined that it is a phishing scam. The message impersonates ShareFile, a legitimate secure file-sharing service, and falsely claims a purchase order document has been shared with the recipient. It is designed to steal email login credentials and should be ignore
We have inspected this email and determined it is malspam. The message poses as a payment receipt notification and contains a link leading to a fraudulent webpage impersonating Adobe Acrobat, which delivers a malicious remote access trojan to the victim's device. This email should be ignored and d
We have inspected this email and determined that it is a phishing scam. Disguised as an urgent storage warning from a "System Administrator," it falsely claims the recipient's webmail account is about to be deleted and urges them to upgrade their plan. The email directs users to a fake login page
We have examined this email and determined that it is a phishing scam. The message poses as an urgent administrative notification from the recipient's email service provider, falsely claiming that DNS activation is needed to restore normal message delivery. It is designed to steal email login cred
We have examined this email and concluded it is a scam. The message poses as an urgent McAfee payment notification, falsely claiming the recipient's antivirus subscription payment has failed. The goal is to push recipients toward fraudulent websites where their payment details can be stolen. This
We have reviewed this email and determined it is malspam. Disguised as a business communication from HUS Ltd, a Bulgarian steel manufacturing company, it asks recipients to open an Excel file supposedly containing order documents. This email has no connection to HUS Ltd - it is a fraudulent messag
We have examined this email and determined it is a phishing scam. The message is designed to look like an automated security alert from the recipient's email server, falsely claiming that the account password will soon expire. Its purpose is to steal email login credentials through a fraudulent we