We have examined the website (distribution-purpe[.]xyz) and concluded that it is a copy of the purpe.xyz and purplepepe.life pages. Fraudsters behind the fraudulent version aim to steal cryptocurrency from unsuspecting visitors. They promote a fake giveaway as a lure. Users should not trust distri

Our team has reviewed the message and concluded that it is a phishing attempt. The email is presented as an urgent notification from Santander Bank. It is created to trick recipients into believing that they can receive a large sum of money for cooperation. The goal is to steal money and (or) info

We have examined the malware and found it to be ransomware from the MedusaLocker family. Our discovery of Chip occurred during an analysis of samples submitted to VirusTotal. We determined that Chip encrypts files and appends the ".chip1" extension (the number may vary). It also generates the "Rec

Our analysis shows that it is a scam email (a phishing attempt) posing as a message from American Express, a legitimate American bank. The fraudsters behind this scheme seek to steal personal information through the included website. Victims of this scam may experience account hijacking, financial

While testing EngineTrack, we discovered that it is an unwanted application that delivers annoying, potentially misleading advertisements. Our team classified EngineTrack as adware. We also found that this app is flagged as malicious by multiple security vendors. Thus, users should not install E

Our team has tested markedoneofthe.com and determined that although it is presented as a search engine, it does not generate results and can direct users to untrustworthy websites. Thus, we classified it as a fake search engine. Moreover, markedoneofthe.com may be associated with browser hijackers

We have reviewed the email and determined that it is a scam disguised as a "Microsoft security update". It contains deceptive links (disguised as options) leading to malicious downloads. Recipients should ignore this fraudulent message to avoid computer infections and further issues. The e

Search1.me is the address of a fake search engine. Typically, such web searchers are promoted by PUAs (Potentially Unwanted Applications) classified as browser hijackers. Search1.me has been observed being pushed by the Better Search browser hijacker. Browser hijackers promote fraudulent w

PC App Store is a legitimate application that allows easy access to various software vendors. However, while this is a genuine piece of software – there are no guarantees that the content advertised through it will not have undesirable features, such as data tracking. Furthermore, PC App Store

Search.live-history.com is a fake search engine, which we discovered while analyzing the LivingHistory browser hijacker. This software is endorsed as a quick-access tool for the user's browsing history. Browser hijackers modify browsers to produce redirects to their promoted websites, such as sear

February 12, 2026

In recent months, cybersecurity researchers have discovered that advanced ransomware operators are abusing legitimate employee-monitoring and remote-support software as covert access channels into corporate networks. This shift represents a tactical evolution in ransomware tradecraft, where adversar

February 09, 2026

In recent months, cybersecurity researchers have uncovered a troubling trend in the ransomware threat landscape: cybercriminals are increasingly abusing legitimate virtual machine infrastructure to conceal their operations, deliver malicious payloads, and prolong their operations while avoiding dete

February 05, 2026

Most people think of cyberattacks as something that happens when someone clicks the wrong link in an email or visits a shady website. The latest GlassWorm malware campaign tells a very different story. In this case, attackers did not trick users directly. Instead, they hid malicious software inside

February 02, 2026

ShinyHunters and associated threat clusters have significantly refined their tactics for breaching enterprise cloud environments, shifting from opportunistic data theft to highly coordinated campaigns that exploit human trust and centralized identity infrastructure. Recent threat intelligence from

January 29, 2026

In late 2025 and early 2026, cybersecurity researchers observed a significant shift in how sophisticated threat actors establish initial access and maintain resilient command infrastructure. At the center of this evolution is a malware strain, known as Tsundere Bot, which has rapidly emerged as a mo