“Mailbox Abuse Notice” email is part of a phishing campaign that tries to steal users’ email login credentials. The email falsely claims that your email provider noticed an unusual login from an unrecognized device and advises that you review your recent activities. If you interact with the email and click on the link, your email login credentials may be phished…
“Roundcube Password Set To Expire” email falls into the phishing email category. The email falsely claims that users’ passwords are about to expire, and users need to click on the link to keep the same password. Failure to engage with the email will supposedly lead to the accounts being blocked. If users click on the link, they will be asked…
“I’ve Got Access To Your Smartphone” email falls into the sextortion scam email category. It’s a very generic sextortion email that falsely claims a video of the recipient watching pornography has been made and will be distributed to all contacts unless a payment of $1,000 is made to the sender. The email contents are completely false, and users can just…
Hlas ransomware is file-encrypting malware. It belongs to the Djvu/STOP ransomware family. This version can be identified by the .hlas extension added to encrypted file names. Unfortunately, once files are encrypted, they need to be put through a decryptor to open them, and acquiring it is difficult. At the moment, only users who have backups can recover files for free.
…
Trial_recovery ransomware is malware that encrypts files. It’s a severe infection that can result in permanently lost files. The ransomware can be identified by the .trial-recovery.[random characters].[random characters].-encrypted extension added to all encrypted file names. If you have a backup of your files, you can start file recovery as soon as you remove Trial_recovery ransomware from your computer. However, users without…
Angry stealer is referring to an information-stealing trojan. The developers are likely based in Russia but the malware is being sold to other cybercriminal groups. It focuses on stealing as much sensitive data as possible from infected devices. It’s a very serious infection that can cause a lot of damage, including lost access to sensitive accounts, financial loss, and identity theft.…
“Is Visiting A More Convenient Way To Reach” email is a sextortion scam that falsely claims users’ computers have been infected with malware, which supposedly allowed its operators to create a video of users watching pornography. The contents of the email are completely fake but this particular email uses a new tactic to convince users of its legitimacy. This sextortion…
Rocinante is a remote access trojan (RAT), a type of infection that gives its operators access to the infected device. It appears to primarily target Android users in Brazil. It focuses on phishing users’ banking credentials, which means victims can suffer serious financial loss if their devices get infected.
…
“ChaosCC hacker group” email falls into the sextortion scam email category. No matter how real and threatening the contents of the email may seem, they are completely false. Despite what the email is claiming, there is no malware on your computer, nor has an explicit video of you watching pornography been filmed. You can ignore the email completely.
…
The “Geek Squad” email is a scam email that falsely claims recipients have been charged $440.80 for a Geek Squad anti-virus service. The emails are likely pushing a refund scam and aim to trick users into calling the shown phone numbers. The emails are impersonating Geek Squad, Best Buy’s tech support and repair service. It goes without saying that neither…