MaksStealer is an information-stealing malware that poses as a performance enhancement tool or cheat modification for Hypixel SkyBlock, a popular Minecraft server. Once executed, MaksStealer silently operates in the background and harvests sensitive information. Victims are strognly advised to eli
We have inspected the site shibar[.]vip and found that it is a deceptive page promoting a cryptocurrency airdrop (giveaway). The purpose of this scam is to trick users into disclosing personal information. Falling for this scam can result in financial loss. Thus, this page should be closed if ever
Our researchers discovered the berolorladentra.co[.]in rogue webpage while investigating suspicious sites. Upon inspection, we determined that this page endorses browser notification spam and redirects visitors to different (likely unreliable/harmful) websites. Most users enter berolorladentra.co[
While browsing untrustworthy websites, our research team discovered the dotfulevabled.co[.]in rogue page. It operates by promoting browser notifications spam and redirecting users to other (likely dubious/hazardous) webpages. The majority of visitors to dotfulevabled.co[.]in and similar pages acce
APEX is ransomware that we discovered while analysing malware samples submitted to VirusTotal. Our examination shows that APEX encrypts files and appends its extension (".Apex") to them. For instance, it renames "1.jpg" to "1.jpg.Apex" and "2.png" to "2.png.Apex". It also provides a ransom note ("
PANDA is a ransomware-type program discovered by our researchers during a routine inspection of new submissions to the VirusTotal platform. This malicious program is designed to encrypt files and demand ransoms for the decryption. After we executed a sample of PANDA on our test machine, it encryp
Our analysis indicates that controllednetworkpc[.]com is a deceptive website that uses clickbait to trick users into consenting to receive its notifications. After gaining permission, the page delivers misleading notifications intended to lure users into visiting suspicious or potentially dangerou
TXTME is ransomware from the Dharma family that our team discovered while inspecting malware samples uploaded to VirusTotal. Upon infiltration, TXTME encrypts files and appends the victim's ID, an email address, and the ".TXTME" extension to them. Also, it provides two ransom notes (a pop-up messa
Our review of Unsceptical.app reveals that it is an ad-supported application (adware) identified as malicious by several security vendors. It has also been linked to the Pirrit family. Installing Unsceptical.app is not recommended, as it may lead users to scams, cause privacy breaches, and other
Our analysis of perwousesoc[.]com shows that it is a misleading website designed to manipulate users into enabling notifications through a tactic known as clickbait. Once permission is granted, it sends deceptive notifications aimed at tricking users into opening questionable and potentially harmf