We have examined this email and concluded that it is a phishing scam. The message impersonates Wealthsimple, a Canadian online investment service, and falsely claims that the recipient's contact email address was recently changed. Its purpose is to trick people into visiting a fraudulent website a
HMDL is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's computer, making them impossible to open. Unlike most ransomware, HMDL does not append any extension to the files it locks. A file named 1.j
Aldet is ransomware our research team identified during a routine inspection of new submissions to the VirusTotal website. It encrypts files, appends a unique victim ID, the attackers' email address, and a ".aldet" extension to filenames, drops a ransom note, and replaces the desktop wallpaper. O
We have inspected this email and determined it is a phishing scam. The message is disguised as an official notification from Zoho, falsely claiming that a server upgrade is urgently required. Its purpose is to trick recipients into handing over their email login credentials on a fraudulent website
We have examined this email and concluded that it is a phishing scam. The message impersonates an automated IT Support notification, falsely claiming the recipient's email account is scheduled for permanent deletion. Its purpose is to trick people into entering their login credentials on a fraudul
After examining this email, we determined it is a phishing scam. The message falsely claims the recipient's email account password is about to expire and urges them to take immediate action to retain access. Clicking the link leads to a fraudulent login page designed to steal email credentials. Th
SnakeBiteAgent is a Remote Access Trojan (RAT) discovered by ANY.RUN. It hands attackers control over an infected Windows computer and bundles password theft, banking fraud, cryptocurrency theft, and live surveillance into a single tool. What makes this RAT unusual is that it does not stay comple
Our research team found olsi5[.]xyz while investigating suspicious websites. After examining this rogue page, we learned that it uses a fake McAfee Safety Warning scam to trick visitors into enabling browser notifications. If permission is granted, olsi5[.]xyz sends unwanted advertisements directl
PackClient is a Remote Access Trojan (RAT) marketed through Telegram channels and deployed by a Chinese-speaking cybercriminal group tracked as TA4922. It gives attackers full remote control over compromised computers and supports over 60 remote commands. According to research published by Proofp
We have examined this email and determined it is a phishing scam. The message is crafted to resemble a legitimate business procurement request attributed to ExxonMobil. In reality, the HTML attachment it carries opens a fake email login form on the victim's device to steal credentials. This email