Upon investigation, we determined that the "MINISTÉRIO PUBLICO PORTUGAL" email is malspam. This letter is presented as a notification regarding an investigation of the recipient by Portugal's Public Prosecution Service (Ministério Público). The claims made by this spam email are false; their purpo
While investigating untrustworthy sites, our research team discovered the "Microsoft Windows Firewall Warning" scam. Upon inspection, we determined that it is a technical support scam. This scheme falsely claims that the user's computer is infected with malware and requires immediate actions to b
Upon reviewing the email, it has been identified that it is a deceptive message (a phishing attempt) with the intention of deceiving recipients into disclosing sensitive information. The email masquerades as a notification from an email service provider and includes a link leading to a phishing we
AccessibleTool is an adware-type application. Our research team found it during a routine investigation of new file submissions to the VirusTotal platform. This app belongs to the AdLoad malware family. Advertising-supported software runs intrusive advertisement campaigns and may have other harm
Personalized_notepad_with_reminders is classed as a PUA (Potentially Unwanted Application). Our researchers discovered an installer containing this app during a routine inspection of suspicious websites. PUAs typically possess undesirable and possibly hazardous capabilities, and this likely applie
Our researchers discovered the Shiel ransomware while investigating new file submissions to the VirusTotal platform. This program is part of the Dharma ransomware family. Malware within this category is designed to encrypt data and demand payment for its decryption. On our testing system, Shiel r
During our examination, we discovered that CreatePremium inundates users with intrusive advertisements, categorizing the app as adware. Users frequently install such adware without a clear understanding of its functionalities. It is important to highlight that adware, including CreatePremium, ca
SPICA is the name of a backdoor-type malware. This malicious program is written in the Rust programming language. Software within this classification stealthily opens a "backdoor" to targeted machines, typically in order to cause further infection. SPICA has been in use since September 2023, but
In this article, we provide a review of deceptive notifications (fake warnings, alerts, and similar messages) posing as legitimate notifications from the operating system or security software. These deceptive notifications come from unreliable pages and often serve as gateways to scam websites des
While inspecting new file submissions to the VirusTotal site, our researchers discovered the Wessy ransomware. Malware within this classification encrypts data to make ransom demands for its decryption. After we executed a sample of Wessy on our testing system, it encrypted files and appended the