We have tested aisearchapp.net and found that it is a fake search engine promoted through an unwanted extension. That extension (called AI Search) is a browser hijacker. It is not advisable to use questionable search engines and browser hijackers, as they could lead to malicious sites and other is
Overlord is a Remote Access Trojan (RAT) written in the Go programming language. It targets both Windows and macOS systems, with first detections recorded in South Korea. On macOS, Overlord can establish a persistent connection to an attacker-controlled server, capture keyboard and mouse input,
Our analysis shows that this is a phishing email designed to trick recipients into believing that it is a message from their cloud service provider. The email includes a link to a fake website designed to pilfer personal information. Falling for this scam can lead to account hijacking and further
We have examined the message and found that it is a phishing attempt. It is used by scammers who seek to steal personal information through a deceptive website. Victims of this scam may lose access to their personal accounts and encounter issues such as identity theft or monetary loss. Recipients
Our analysis of app.sparkfi[.]guru revealed a fraudulent page impersonating the legitimate Spark platform. It promotes a fake voting rewards event, claiming the first 1,000 voters will receive an "Assets Boost." In reality, the site is a cryptocurrency drainer - connecting a wallet triggers an aut
During our examination of the jito-network[.]vip site, we found that this page promotes a fake Jito Staked SOL ($JITOSOL) airdrop. Further analysis revealed that it is a fraudulent page designed to steal cryptocurrency from visitors by tricking them into connecting their digital wallets. IMP
We have analyzed the message and found that it is designed to steal personal information. Emails of this type are classified as phishing attempts. This particular scam email is designed to look like a message from an email service provider. It provides a link to a fake website to trick recipients
Our team has determined that this is a phishing attempt disguised as an important notification from an email service provider. It is designed to trick recipients into believing that they need to take certain actions to avoid potential issues with their email accounts. The goal is to steal personal
Dominus is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's computer and demands payment in exchange for decryption. Dominus also claims to steal sensitive data before encryption, threatening to pub
We have inspected this email and concluded it is malspam. The message impersonates the Internal Revenue Service (IRS), falsely claiming that official tax documents are available for secure download. The link inside leads to a fraudulent website that delivers a remote access trojan disguised as an