LegionRoot ransomware is file file-encrypting malware that will take files hostage by encrypting them. It is a very dangerous type of malware because once files are encrypted, it will not necessarily be possible to recover them. Encrypted files will have a random 10-character string attached to them, allowing you to quickly identify which files have been affected. Unfortunately, all personal…
Bbq ransomware is file-encrypting malware from the Makop ransomware family. It’s a dangerous infection that takes files hostage by encrypting them and demands a payment for their recovery. This ransomware can be identified by the .[dashboard487@onionmail.org].bbq46 extension added to encrypted files. Files with that extension will not be openable unless they’re first put through a decryptor, which only the malicious…
The “Account Verification Alert” email is part of a phishing campaign that aims to steal users’ email login credentials. The email claims that users need to verify their email accounts to avoid “obstruction of service or account deletion”. A deadline of 3 days is given to complete the verification process. If users interact with the email and try to “verify”…
The “Claim Fomo” scam refers to a fake fomo website that tries to trick users into connecting their crypto wallets. fomo is a social trading platform that allows users to see trading profiles of the people they follow and keep track of what other users buy/sell. Malicious actors have created a nearly identical website (claim-fomo.family) that claims users can participate…
Se7en ransomware is malware that encrypts files. It uses military-grade encryption to essentially lock files and prevent users from being able to open them. Se7en ransomware adds the .se7en extension to encrypted file names so users will immediately know which files have been affected. Unless victims get their hands on a decryptor, they may not necessarily be able to recover their…
PLU ransomware is a malicious malware infection that encrypts files. The infection uses complex encryption algorithms to encrypt files and makes them unopenable unless a decryptor is first used. This ransomware can be identified by the extension that ends in .plu that gets added to all encrypted files. The malicious actors operating this ransomware demand a payment for the decryptor,…
The “Bank Of America – Account Verification” email is a phishing attempt that will try to steal your Bank of America online account login credentials. The email claims that potentially fraudulent activity has been identified on your account, which resulted in your account access being temporarily locked. To supposedly restore access to the account, you need to go through a verification…
The “Wells Fargo – Important Security Check” email is part of a phishing campaign that aims to steal Wells Fargo customers’ online bank account login credentials. The email is disguised as a notification from the bank, supposedly informing users that they need to validate their identities to continue using their online bank account. If users do not validate their identities by…
Lyrix ransomware is a file-encrypting malware. It’s a dangerous infection that essentially takes files hostage by encrypting them. Users who want to recover their files are asked to pay a ransom, though the exact sum is not mentioned in the ransom notes dropped by this ransomware. The ransomware cannot be identified by the extensions it adds to encrypted files, as…
The “SumUp – Update Your Profile” email is part of a phishing campaign aiming to steal users’ SumUp login credentials. The email is disguised as a notification from SumUp, supposedly informing recipients about updates to their servers and the necessity for recipients to update their customer area. According to the email, if they do not comply, credit and debit card transactions…