"Volksbank email scam" is a spam campaign targeting German-speaking users. These emails are disguised as mail from the Volksbanken und Raiffeisenbanken - a real brand of cooperative banks in Germany. The goal of this spam mail is to promote a fake website presented as the genuine site of the afore
"Terra Wallet" refers to a phishing scam promoted on various deceptive websites. This scheme targets Terra (LUNA) cryptocurrency storing wallet credentials. Therefore, users can have their digital wallets stolen by attempting to access their cryptowallets via these scam sites. Cryptocurren
Yqal is ransomware that encrypts files, appends its extension (".yqal") to filenames, and generates a ransom note (the "_readme.txt" file). An example of how Yqal modifies filenames: it renames "1.jpg" to "1.jpg.yqal", "sample.png" to "sample.png.yqal", and so on. Yqal is part of the Djvu ransomwa
Spdate[.]com is a rogue site akin to captcharesolverhere.top, new-updates-service.com, yoursurveyprogram.com, and thousands of others. It is designed to load dubious content and/or redirect visitors to different (likely unreliable or malicious) websites. Rogue pages are typically entered via redi
Part of the MedusaLocker ransomware family, Reads is a malicious program that encrypts data (renders files unusable) and demands ransoms for the decryption. Compromised files are appended with a ".reads" extension, e.g., a file like "1.jpg" would appear as "1.jpg.reads", "2.jpg" as "2.jpg.reads",
"Pornographics Security Warning" is a technical support scam. It claims that due to questionable activity having been detected - users' devices were blocked. The goal of this scheme is to trick victims into contacting the scammers, and afterwards- abuse their trust to generate revenue at their exp
SpyAgent is a malicious program known to abuse legitimate Remote Access Tools (RATs) to gain access and control over infected machines. This malware has also been observed injecting devices with various Remote Access Trojans and data-stealers. SpyAgent has been actively proliferated via malicious
It is a phishing scam. Typically, phishing emails are used to trick recipients into providing sensitive information (for example, login credentials, credit card details, social security numbers). They usually contain a link to a phishing page. Scammers behind such emails pretend to be legitimate c
Psychopath is a piece of malicious software classified as ransomware. It operates by encrypting data (rendering the files inaccessible) and demanding payment for the decryption (access recovery). Compromised files are appended with an extension that follows this pattern - "[ID=victim's_ID-Mail=ps
BLUE LOCKER is ransomware. Malware of this type encrypts files, modifies their filenames, and generates a ransom note. BLUE LOCKER appends the ".blue" extension to filenames, for example, it renames "1.jpg" to "1.jpg.blue", "2.jpg" to "2.jpg.blue". Its ransom note is a text file named "restore_fil