PollCat is a Remote Access Trojan (RAT) written in obfuscated JavaScript. It gives attackers remote control over infected computers, letting them run commands, steal files, manage processes, and execute additional code. PollCat is cross-platform and works on Windows, Linux, and macOS. Kaspersky r
NodeRabbit is a Remote Access Trojan (RAT) written in Node.js. It lets attackers secretly run commands, manage files, collect information about the device and network, and load additional code on infected computers. The malware is cross-platform and works on Windows, Linux, and macOS. Kaspersky r
We have examined this email and determined it is a phishing scam. The message is disguised as a legitimate business purchase order and carries an HTML file attachment. Opening the attachment reveals a fake Adobe-locked document interface designed to steal the recipient's email password. This email
We have inspected this email and determined that it is malspam. The message impersonates official correspondence from Absa bank to trick recipients into opening an attached PDF file. That PDF contains a link which downloads a malicious script designed to inject malware onto the victim's device. Th
Overbridgenet.com is a domain contacted in the background by an adware-type browser extension. We analyzed the campaign after it was documented by Qi'anxin Threat Intelligence Center, which named the extension responsible "Ghost Extension". The extension adds sponsored shopping results to Google
The WebWebWeb.com browser hijacker infiltrates Internet browsers (Google Chrome and Mozilla Firefox) through free software downloads. At time of testing, this website was promoted via an application called 'video downloader professional'. Developers of this browser settings-changing adware (LINK6
"LinkedIn email scam" refers to spam campaigns - large-scale operations during which thousands of emails presented as messages from LinkedIn are sent. LinkedIn is a business and employment-oriented online service, designed to aid in professional networking. The aim of the fake "LinkedIn" emails i
While investigating dubious websites, our researchers discovered the "Android Has Detected A Wiretap On Your Phone" scam. It claims that the user's smartphone has been wiretapped. Typically, scams of this kind aim to trick users into downloading/installing or purchasing (likely suspicious/harmful)
We have inspected this email and determined it is malspam - a fraudulent message crafted to deliver malware. It poses as a shipping notice from FedEx, claiming that a parcel's customs clearance requires further information. The email has no connection to FedEx whatsoever and should be deleted imme
Pulse is a Chromium-based browser. It is promoted as an Internet browser that integrates AI (Artificial Intelligence). Upon inspection, we determined that this rogue browser is a PUA (Potentially Unwanted Application). It produces redirects to several fake search engines that cannot generate searc
Security researchers have identified a large-scale phishing-as-a-service platform that successfully bypassed multi-factor authentication protections across hundreds of organizations worldwide. The platform, tracked as BigBear 2.0, targeted Microsoft 365 accounts exclusively, stealing thousands of cr
A critical vulnerability in the Elementor Pro plugin for WordPress is being actively exploited by attackers who want to seize control of vulnerable websites. Tracked as CVE-2026-32475, the flaw allows unauthenticated attackers to upload malicious PHP files and execute arbitrary commands on compromis
Berlin's city administration has confirmed that cybercriminals stole sensitive data from its network and are now attempting to extort the German capital. The Rhysida ransomware gang listed Berlin on its dark web leak site on August 28, claiming credit for an intrusion first discovered in mid-August.
Security researchers have identified a previously unknown malware family called SynkLoader, distributed via Microsoft Teams phishing campaigns impersonating corporate IT help desks. Expel researcher Marcus Hutchins uncovered the loader while investigating an incident on a client network, after an en
Security researchers have uncovered a significantly upgraded version of the ToxicPanda Android banking trojan that now targets 349 financial applications across 16 countries, blocks Google Play at the network level, and hijacks Android's wireless debugging feature to seize shell-level control of inf
Combo Cleaner is an all-in-one solution developed by RCS LT, the company behind PCrisk.com. Making a powerful entrance as a comprehensive antivirus and system optimization solution, it's here to shield you from various threats on Windows, macOS, Android, and iOS.
When assessing the best way to reclaim your privacy, the personal data removal service Incogni is a popular option. It works by automatically sending requests to data brokers and people-search websites, erasing personal information from their databases.
Launched in 2010 by the privacy company Abine and based in the U.S., DeleteMe has over a decade of experience in cleaning up personal information from the web. This review examines DeleteMe's pricing, features, performance, and value.
Optery stands out as the most flexible personal data removal service. Optery may not be overflowing with the advanced features of more expensive services, but it's getting the results done, and lets you only pay for the level of security you require.
When it comes to Privacy Bee, a privacy protection service that scrubs your personal information from data broker databases and public listings, this review, written by the PCrisk team, will be a solid reference.