Discovered by Karsten Hahn, .com (Phobos) is a part of the Phobos ransomware family. Like many other programs of this type, .com (Phobos) encrypts victims' files, changes filenames and provides instructions about how to contact the developers (and other details) in a ransom message. It renames al
This email scam is disguised as a message regarding fund approval, supposedly by "IFC Global Development Funding Program". Scammers behind this email claim that recipients can receive a specific sum of money by sending various personal details. We strongly advise against replying to this email or
twok[.]pro is a rogue website that shares many similarities with zahkit.pro, scuseami.net, showeverig.info and countless others. Visitors to this page are presented with dubious content and/or are redirected to other untrusted, even malicious sites. Typically, users do not access these web pages
younwild[.]com has similar behavior to zahkit[.]pro, usinesmycete[.]info, scuseami[.]net and many other rogue websites. When visited, it opens a number of other untrusted pages or loads dubious content. Typically, websites such as younwild[.]com are opened through various dubious web pages, decep
yourday-winprize[.]life redirects visitors to various other potentially malicious, deceptive and untrusted websites. Typically, people do not arrive at websites such as yourday-winprize[.]life intentionally - in most cases, they are opened through other untrusted websites, dubious advertisements
rewardsawesome[.]com is a rogue website designed to promote untrusted/malicious pages and/or present visitors with dubious content. The site has been observed promoting various fake prize-oriented scams. During research, rewardsawesome[.]com has promoted "Congratulations Amazon shopper!", "Congra
AlphaBetaCrypt ransomware is designed to encrypt victims' files, change the filenames and create a text file (containing the ransom message). The program renames all files by appending the ".CRYPT" extension (e.g., it renames "1.jpg" to "1.jpg.CRYPT", and so on), and creates the "README_README_RE
"Congratulations Samsung user!" is a scam run on deceptive web pages. It claims that, due to visitors' support of "Samsung" services, the company is offering the chance to win an "exclusive reward". Note that this dubious scheme has no connection with Samsung. Additionally, any prizes offered are
LIVE is a malicious program belonging to the Dharma ransomware family. Systems infected with it have their data encrypted and users receive ransom demands for decryption tools/software. When this ransomware encrypts, all filenames are appended with a unique ID, the developer's email address and th
This lottery scam is disguised as a lottery organized by Walgreens. Like many other legitimate companies, Walgreens is not a part this or other similar scams in any way. Typically, scammers behind these websites attempt to deceive visitors into participating in a fake lottery and providing persona