Adventurer is ransomware that our team discovered during a routine inspection of malware samples submitted to VirusTotal. Upon execution, Adventurer encrypts files and alters their filenames. It also provides a ransom note, "README.TXT". This ransomware appends the victim's ID and the ".adventurer
We have analyzed yttnmx.co[.]in and found that it uses misleading content to trick users into allowing notifications. If permission is granted, it can send deceptive messages, such as fake warnings, that may lead to harmful or malicious websites. It is best to avoid yttnmx.co[.]in and similar site
We have examined xensguard[.]pro and found that it displays misleading content to obtain permission to show notifications. If this permission is granted, xensguard[.]pro can deliver deceptive notifications (e.g., fake warnings) to trick users into opening potentially malicious pages. Xensguard[.]p
Our analysis shows that nololadhotto[.]com is an untrustworthy website designed to deceive users into enabling its notifications. If allowed, it can bombard users with fake ads, deceptive warnings, and other unwanted content. We strongly advise against accepting notifications from nololadhotto[.]c
While browsing suspect sites, our research team discovered undentory[.]com. After examining this rogue page, we determined that it promotes browser notifications spam and redirects users to different (likely dubious/malicious) websites. Undentory[.]com and analogous webpages are primarily accessed
Rhauties[.]com is a rogue webpage discovered by our researchers during a routine investigation of dubious sites. Upon inspection, we learned that this page endorses spam browser notifications and redirects users to other (likely unreliable/hazardous) websites. The most common way of accessing web
Konfety is the name of a malicious program targeting Android operating systems. There are several variants of this malware. It can operate as adware and even cause chain infections. It is noteworthy that Konfety campaigns have been observed utilizing the same package name as a harmless applicatio
While browsing dubious websites, our researchers discovered the novaadsdrive[.]top rogue page. It operates by promoting browser notification spam and generating redirects to other (likely unreliable/harmful) sites. Novaadsdrive[.]top and similar webpages are most commonly accessed through redirect
Our analysis of adscloudoffer[.]top reveals that it is an unreliable website designed to trick users into allowing notifications. Once permission is granted, it can flood users with fake advertisements, misleading alerts, and similar content. For this reason, it is strongly recommended not to acce
Stivindmous.co[.]in is a rogue page discovered by our researchers while browsing suspicious websites. The webpage's purpose is to trick visitors into permitting browser notification delivery. It can also redirect them to other (likely unreliable/harmful) sites. Most users access stivindmous.co[.]i