CryptoBot Malware

macOS users are being lured into fake Zoom extensions or messaging links, unwittingly installing CryptoBot—an info‑stealing Trojan that copies wallet…

ITFunk Research
2 Min Read

Kyj Ransomware

A recent surge in Kyj ransomware attacks revealed victims waking up to locked files marked with the .kyj extension—prompting ransomware notes demanding contact via kyjpc@cock.li or…

ITFunk Research
3 Min Read

SilentRoute Trojan

Cybercriminals are distributing a trojanized version of SonicWall’s SSL VPN NetExtender (version 10.3.2.27), misleading users into installing what appeared to be legitimate…

ITFunk Research
2 Min Read

Mailbox Usage Warning Email Scam

A recent campaign, dubbed "Mailbox Usage Warning", surfaced in late June 2025. A user received an alarming email stating their mailbox was…

ITFunk Research
3 Min Read

“Messages Waiting” Booking.com Scam

Scam Overview Scam Tactics: Why It Tricks So Many Key Details Table Threat TypePhishing / Scam via Booking.comDisguise"Messages waiting" notification…

ITFunk Research
3 Min Read

Blackransombdbot

A user discovered their files renamed with a .blackransombdbot extension, a tell‑tale sign of the new Blackransombdbot ransomware—a Chaos family variant. The…

ITFunk Research
2 Min Read

Pope/Vatican Ransomware

A recent case saw “Vatican” ransomware strike, renaming files to “filename.POPE” and displaying a multi-language ransom pop-up referencing the Vatican…

ITFunk Research
3 Min Read

007 Ransomware

A recent case saw a Windows system infected by a discovered strain named “007,” which added a “.007” suffix to…

ITFunk Research
2 Min Read

Review4.in Redirect

A recent case revealed browsers suddenly routing all searches to a suspicious domain: review4.in, accompanied by fake malware alerts and…

ITFunk Research
2 Min Read

Ramses Exchange Website

A recent report revealed attackers tricking users into connecting crypto wallets to a fake Ramses Exchange site—an elaborate scam designed…

ITFunk Research
2 Min Read
en English