While inspecting new malware submissions to VirusTotal, our research team discovered Crone ransomware. This malicious program is designed to encrypt data and demand payment for the decryption. On our testing system, Crone encrypted files and added a ".crone" extension to their filenames. To elabo
Warning is ransomware belonging to the GlobeImposter family. We discovered it during our routine inspection of malware samples uploaded to VirusTotal. Our analysis shows that Warning encrypts files and appends ".warning!_16" (its extension) to them. The ransomware also creates a ransom note ("HOW_
Searchthatweb.com is a fake search engine. Usually, websites of this kind cannot provide search results. We discovered this page while examining the SearchThatWeb browser hijacker. This extension was promoted as a tool for improving the browsing experience by expediting processes and eliminating d
We have examined obesfirewall.co[.]in and discovered that it uses clickbait to deceive visitors into agreeing to receive notifications. If this permission is granted, obesfirewall.co[.]in can send notifications containing fake warnings and similar content to lure users into unreliable web pages.
Search.live-history.com is a fake search engine, which we discovered while analyzing the LivingHistory browser hijacker. This software is endorsed as a quick-access tool for the user's browsing history. Browser hijackers modify browsers to produce redirects to their promoted websites, such as sear
We have analyzed Ginapc Quor Utils and found that this app has no real value to users and contains malicious components (such as the Legion Loader). Installing Ginapc Quor Utils can lead to computer infections and other issues. Thus, it is highly advisable not to install this app and remove it as
We have checked webplannerview.com and discovered that it is a fake search engine promoted through an unwanted extension, a browser hijacker called Web View. Webplannerview.com does not generate results, and the extension promoting it likely does not provide any real value to users. Thus, users sh
Our inspection of the email has shown that it is a fake notification from an email service provider. It includes a link to a deceptive web page designed to steal personal information. Emails of this type are classified as phishing emails. They should be ignored to avoid the associated risks.
Our analysis of the News Searcher Pro extension has shown that it is a browser hijacker. Once added, it changes the settings of a web browser to promote a fake search engine (obsrchrdr.com). Additionally, News Searcher Pro can read various data. This extension can expose users to scams and other o
Our examination of the "Service Update Notification" email revealed that it is spam. This message claims that a mail server update has to be implemented within 24 hours. The spam mail aims to deceive recipients into disclosing their email account log-in credentials to a phishing website. T