Rocinante is a remote access trojan (RAT), a type of infection that gives its operators access to the infected device. It appears to primarily target Android users in Brazil. It focuses on phishing users’ banking credentials, which means victims can suffer serious financial loss if their devices get infected.
…
“ChaosCC hacker group” email falls into the sextortion scam email category. No matter how real and threatening the contents of the email may seem, they are completely false. Despite what the email is claiming, there is no malware on your computer, nor has an explicit video of you watching pornography been filmed. You can ignore the email completely.
…
ovelatishly.com is a generic scam website that tries to trick users into allowing ads on their desktops. To spam users with ads, the site misuses a legitimate browser feature, which is why you will get a browser alert saying “ovelatishly.com wants to show notifications” as soon as you enter the site. Clicking “Allow” would authorize the site to show ads…
The “Geek Squad” email is a scam email that falsely claims recipients have been charged $440.80 for a Geek Squad anti-virus service. The emails are likely pushing a refund scam and aim to trick users into calling the shown phone numbers. The emails are impersonating Geek Squad, Best Buy’s tech support and repair service. It goes without saying that neither…
Insom ransomware is a malicious infection that encrypts files. It’s a very dangerous type of malware that essentially takes users’ files hostage. The malware is part of the Makop ransomware family and can be identified by the .inson extension added to encrypted files. This ransomware not only demands a ransom payment but also threatens to publish users’ files on a…
Kaseek is a browser hijacker, promoted as a useful extension. These infections are promoted as extensions that improve the browsing experience. Kaseek installs via deceptive installation methods, and once installed, it makes unwanted changes to the browser’s settings. It forces users to use a questionable search engine that may insert sponsored content into search results. This is done to redirect…
“Virus Alert (05261)” is a fake virus alert that claims your computer has been locked due to unusual activity and a supposed malicious infection. The fake alerts ask that users call the provided phone number to get assistance, which is why it’s classified as a tech support scam. Users can ignore the alert as there is no malware on their…
Users are warned to be cautious of the Rafel Remote Access Trojan (RAT) that targets Android devices. The malware allows its operators to completely access the infected device, steal data, access messages, intercept and access multi-factor authentication alerts, encrypt files, and lock the device. The malware is known to target high-profile individuals and organizations.
…