Exitium is ransomware that our team has found while examining malware samples uploaded to VirusTotal. Once a device is infected with Exitium, the malware encrypts files and appends the ".exitium" extension. For instance, it renames "1.jpg" to "1.jpg.exitium" and "2.png" to "2.png.exitium". Also, E
Our analysis shows that forestrievic[.]com is designed to trick users into allowing notifications. After permission is granted, it may deliver misleading alerts, scam offers, and other dubious content aimed at directing users to untrustworthy websites. It is recommended to avoid trusting forestrie
Our findings indicate that omnitaro.co[.]in is used to mislead visitors into enabling its notifications. Once permission is given, the site can send deceptive alerts, fraudulent promotions, and other suspicious content that can lead users to unsafe websites. Users are advised not to trust omnitaro
We have inspected the email and found that it is written by scammers who seek to trick recipients into believing that they received a message (a "mail queue notification) from their email service provider. The purpose of this fraudulent message is to steal personal information through a fake websi
The fake Google Docs Offline extension is a malicious Chrome extension that masquerades as a real Google tool. It is injected as part of a larger attack and is used to spy on users. Once planted, it can log what victims type, steal cookies, login sessions, and capture screenshots. If present on a
We have reviewed the email and found that it is a scam disguised as a final notice from a cloud service. The scammers behind it seek to trick recipients into opening a misleading website and following the provided instructions. None of the claims in this email (or the associated scam sites) is tru
Vect is ransomware that we have discovered while inspecting malware samples uploaded to VirusTotal. Once a system is infected, this ransomware encrypts and renames files, changes the desktop wallpaper, and drops a ransom note ("!!!_READ_ME_!!!.txt"). An example of how it renames files: it changes
Our assessment indicates that huverify.co[.]in is set up to manipulate visitors into enabling notifications. Once permission is given, it can push deceptive alerts, fraudulent promotions, and other questionable content intended to drive traffic to unreliable websites. Users are advised not to trus
Our analysis shows that cholablelogne[.]com is designed to trick users into accepting its notifications. If permission is granted, it may send misleading alerts, fake offers, and other unreliable contend used to promote shady websites. Users should avoid visiting cholablelogne[.]com and never allo
SnappyClient is malware delivered through HijackLoader. It is written in C++ and used by cybercriminals to remotely control infected devices (as a remote administration Trojan) and steal data. Once a system is infected, SnappyClient can communicate with a C2 server to receive instructions.