Our researchers discovered NeZha ransomware while investigating new submissions to the VirusTotal platform. Malicious programs within this classification operate by encrypting files and demanding ransoms for the decryption. On our test machine, NeZha encrypted and renamed files. Original filename
Our inspection of ironforgemaster[.]top revealed that the site employs clickbait to trick users into granting it permission to send notifications. Once allowed, it can flood users with intrusive and misleading alerts as well as other deceptive messages. For this reason, ironforgemaster[.]top shoul
Spanblocknet[.]com is a rogue webpage discovered by our researchers during a routine inspection of untrustworthy sites. It operates by endorsing browser notification spam and redirecting users to different (likely dubious/harmful) websites. Most visitors to spanblocknet[.]com and analogous pages a
Our researchers found nextchainnet[.]com while browsing untrustworthy websites. After inspecting this rogue webpage, we learned that it promotes browser notification spam and generates redirects to other (likely unreliable/hazardous sites. Nextchainnet[.]com and similar pages are most commonly ac
During a routine investigation, our researchers discovered this fake "Keeta" webpage (keeta-ai[.]com; possibly other domains). The purpose of this scam is to trick users into exposing their digital wallets to a cryptocurrency drainer by luring them with an imitation of Keeta Network's official web
Upon inspecting ironcarver[.]top, we concluded that the site uses clickbait (a misleading tactic) to obtain permission to show notifications. If permitted, it can bombard users with annoying and deceptive warnings and other messages. Thus, ironcarver[.]top should be avoided. On ironcarver[
Our research team found the kyvixzuno.co[.]in rogue webpage during a routine inspection of suspicious sites. After examining this page, we learned that it endorses browser notifications spam and redirects visitors to different (likely questionable/malicious) websites. Kyvixzuno.co[.]in and simila
While investigating untrustworthy websites, our researchers discovered the sipicatatrania.co[.]in rogue page. Upon examination, we determined that it promotes browser notification spam and redirects users to different (likely unreliable/hazardous) sites. The majority of visitors to sipicatatrania
Our researchers found the RDAT ransomware during a routine inspection of new file submissions to the VirusTotal website. This malicious program belongs to the Dharma ransomware family. Ransomware is designed to encrypt data and demand ransoms for the decryption. When we executed a sample of RDAT
Our examination of drovixzaro.co[.]in has revealed that it uses a deceptive method to obtain permission to send notifications. If allowed, drovixzaro.co[.]in can send misleading notifications (e.g., fake alerts) to trick users into interacting with them. This site should not be trusted. Dr