Moonrise is a remote access Trojan (RAT) written in Go programming language. It provides attackers with remote system access, allowing them to gather sensitive information (e.g., login credentials) and execute additional attacks while avoiding detection. The RAT should be eliminated from infected
Our team has examined the email and concluded that it is a scam. The message is presented as an "Ethereum Powerball PowerPlay Reward Alert" to trick recipients into believing that they can receive rewards. However, none of the claims in this email are true, and falling for it can lead to various n
We have reviewed the email and determined that it is a phishing attempt. It is crafted to appear as a notification regarding an invoice to trick recipients into opening a deceptive website. The scammers behind this fraudulent email seek to steal personal information. Victims of this scam may have
Our analysis shows that it is a scam email disguised as a transfer request from Wells Fargo Bank. It is designed to appear legitimate and trick recipients into opening the provided page. The ultimate goal is to steal personal information. Scams of this type are classified as phishing attempts.
We have inspected the site and found that it is a scam involving multiple fake messages. The purpose of this scam site is to scare visitors into following the provided instructions to "protect" their devices. Users should recognize such scams to avoid potential risks (e.g., monetary loss or data t
Our team has inspected the email and found that it contains a fake notification about suspicious activity on the recipient's account. The message also includes a link to a deceptive page designed to pilfer personal details. Such messages are classified as phishing attempts, and they should be igno
We have reviewed the email and found it to be a phishing message. It is created by scammers who seek to trick recipients into believing that a document is awaiting their review. However, none of the claims in this email are true, and its purpose is to steal personal information through a fake webs
Our analysis shows that this email is a scam, specifically an advance-fee fraud. It is disguised as a message from the Federal Equity Trust Bank and states that the recipient can get money in exchange for cooperation. Typically, fraudsters use such messages to trick recipients into sending money o
We have reviewed the message and determined that it is a phishing attempt. The scammers behind this deceptive email pretend to be an email service provider. Their goal is to trick unsuspecting recipients into following the provided instructions and entering personal information on a fake website.
Strike is ransomware belonging to the MedusaLocker family. We discovered it while inspecting samples uploaded to VirusTotal. Upon execution, Strike encrypts files and appends the ".strike7" extension (the number in the extension may vary). For instance, it renames "1.jpg" to "1.jpg.strike7", "2.pn