Our research shows that suriumes[.]com is designed to trick users into allowing notifications through a misleading message. If those notifications are enabled, the site can send fake alerts and other deceptive content to promote unreliable, potentially malicious websites. Thus, suriumes[.]com and

Our analysis has revealed that proceedandgo.co[.]in is designed to trick visitors into agreeing to receive notifications. The website uses a deceptive message as a lure. If permitted, proceedandgo.co[.]in can deliver fake warnings and other types of misleading notifications that can expose users t

Our analysis shows that Open is ransomware, and our team discovered it while examining samples submitted to VirusTotal. After execution, Open encrypts files, replaces their names with a random filename, and appends the ".open" extension. For example, it renames "1.jpg" to "Lbl6zpSzTC.open" and "2.

Our analysis shows that Ndm448 is ransomware that belongs to the Makop family. Our discovery of Ndm448 occurred during a routine inspection of malware samples uploaded to VirusTotal. Once run, Ndm448 encrypts files, modifies their filenames, changes the desktop wallpaper, and provides a ransom not

We have reviewed the message and concluded that it is a phishing email. The scammers behind it seek to trick recipients into believing that this is a legitimate notification from the email service provider. Their goal is to deceive recipients into revealing personal information on a fraudulent web

We have reviewed the email and determined that it is a scam disguised as a "Microsoft security update". It contains deceptive links (disguised as options) leading to malicious downloads. Recipients should ignore this fraudulent message to avoid computer infections and further issues. The e

The WebWebWeb.com browser hijacker infiltrates Internet browsers (Google Chrome and Mozilla Firefox) through free software downloads. At time of testing, this website was promoted via an application called 'video downloader professional'. Developers of this browser settings-changing adware (LINK6

While investigating dubious websites, our researchers discovered the "Android Has Detected A Wiretap On Your Phone" scam. It claims that the user's smartphone has been wiretapped. Typically, scams of this kind aim to trick users into downloading/installing or purchasing (likely suspicious/harmful)

Bookmarks Button is a deceptive application that supposedly allows users to add website bookmarks. On initial inspection, Bookmarks Button might seem legitimate and useful, however, this app usually infiltrates systems without consent. Furthermore, it delivers intrusive online advertisements and c

Search1.me is the address of a fake search engine. Typically, such web searchers are promoted by PUAs (Potentially Unwanted Applications) classified as browser hijackers. Search1.me has been observed being pushed by the Better Search browser hijacker. Browser hijackers promote fraudulent w

February 09, 2026

In recent months, cybersecurity researchers have uncovered a troubling trend in the ransomware threat landscape: cybercriminals are increasingly abusing legitimate virtual machine infrastructure to conceal their operations, deliver malicious payloads, and prolong their operations while avoiding dete

February 05, 2026

Most people think of cyberattacks as something that happens when someone clicks the wrong link in an email or visits a shady website. The latest GlassWorm malware campaign tells a very different story. In this case, attackers did not trick users directly. Instead, they hid malicious software inside

February 02, 2026

ShinyHunters and associated threat clusters have significantly refined their tactics for breaching enterprise cloud environments, shifting from opportunistic data theft to highly coordinated campaigns that exploit human trust and centralized identity infrastructure. Recent threat intelligence from

January 29, 2026

In late 2025 and early 2026, cybersecurity researchers observed a significant shift in how sophisticated threat actors establish initial access and maintain resilient command infrastructure. At the center of this evolution is a malware strain, known as Tsundere Bot, which has rapidly emerged as a mo

January 27, 2026

In recent months, cybersecurity researchers have documented a marked escalation in the sophistication and ambition of cyberattacks linked to North Korean state–aligned threat actors. This includes those attributed to the Konni cluster and its close ties with APT37. These campaigns highlight a wid