Payouts Kings is ransomware first documented by security researchers at Zscaler. We also investigated this threat through samples available on VirusTotal. It encrypts files on corporate networks, appends a hardcoded extension to their names, and creates a ransom note - while also exfiltrating data
Our researchers discovered chydront[.]com while investigating dubious websites. After examining this rogue page, we determined that it promotes browser notification spam and redirects visitors to other (likely unreliable/dangerous) sites. Most visitors reach chydront[.]com via redirects generated
Our researchers discovered deltagrowthforge[.]com while investigating dubious websites. After examining this rogue page, we determined that it promotes browser notification spam and generates redirects to other (likely unreliable/dangerous) sites. Deltagrowthforge[.]com uses a fake CAPTCHA
While investigating suspicious websites, our team came across solara-trade[.]com, a page promoting what appears to be a free AI-powered trading tool for Solana memecoins. The site claims its terminal automatically detects and trades high-potential tokens before price spikes occur. In reality, sola
Our researchers discovered ellinfituns[.]com while investigating dubious websites. After examining this rogue page, we determined that it promotes browser notification spam and generates redirects to other (likely unreliable/dangerous) sites. Ellinfituns[.]com presents visitors with a blac
We have examined this email and determined that it is a phishing scam. Disguised as a business communication about a revised invoice, it lures recipients to a fraudulent website designed to steal corporate email credentials. This email should be ignored to prevent unauthorized account access and p
We analyzed this email and concluded it is a phishing scam. It impersonates a generic email service provider, claiming that a login is required for routine maintenance, and directs recipients to a fake Webmail login page designed to steal their credentials. This email should be ignored and deleted
Our team has examined claim-qubit.pages[.]dev, a site presenting itself as an official Qubit Inu airdrop page offering free "$Qubit" tokens. In reality, it is a cryptocurrency drainer scam. Visitors who connect their wallets have their digital assets transferred to the scammers. IMPORTANT NO
We have inspected claim-bitcat.pages[.]dev and found that it promotes a fake cryptocurrency airdrop. The page claims visitors can receive free "$Bitcat" tokens as part of a "live" event. In reality, it is a fraudulent scheme designed to steal digital assets from anyone who connects their wallet.
Navi RAT is a Remote Access Trojan (RAT) written in the Go programming language. Beyond remote access, it also functions as an information stealer, collecting cryptocurrency wallet data, Roblox session cookies, files, and other personal information from infected devices. Threats like this typical