The first versions of Coyote #malware use a combination of Base64 and AES encryption, now, the new versions are using Base64 encoded twice.

Some #Phishing websites try to steal your credentials with fake login pages which show the logo of the domain passed in the parameter.
One example is hxxps://secure[.]adnxs[.]com/clktrb?id=<id_number>&redir=hxxps://kmgsuwasewa[.]lk/khfe/jbfv?
email=<user>@<domain>