BAGAJAI is a ransomware-type program discovered by our researchers while reviewing new submissions to the VirusTotal website. This malicious program is part of the MedusaLocker ransomware family. Malware within this classification operates by encrypting data in order to demand a ransom for decrypt
PROMPTSTEAL is a malicious program designed to steal information. It is written in the Python programming language. This data miner is a novel malware that utilizes generative AI to create malicious commands during execution. PROMPTSTEAL has been used by FROZENLAKE (also known as APT28) – a thr
We have examined upectaevie[.]com and determined that it uses clickbait to trick visitors into consenting to receive its notifications. Once this permission is given, upectaevie[.]com starts showing bogus warnings and other deceptive notifications. The purpose of upectaevie[.]com is to promote oth
Fantasy Hub is a Remote Access Trojan (RAT) targeting Android devices. The malware is sold as Malware-as-a-Service and is capable of controlling infected devices, exfiltrating messages, contacts, and media, and intercepting or manipulating incoming notifications. Fantasy Hub should be removed from
Our team has checked antombly.co[.]in and found that it uses a misleading technique (known as clickbait) to trick visitors into granting it permission to send notifications. If the site obtains this permission, it can show fake warnings and other deceptive messages to promote other unsafe pages.
While investigating dubious websites, our researchers discovered the "Android Has Detected A Wiretap On Your Phone" scam. It claims that the user's smartphone has been wiretapped. Typically, scams of this kind aim to trick users into downloading/installing or purchasing (likely suspicious/harmful)
"Instagram Password Hacker" is a scam run on various deceptive websites. This scheme is presented as a hacking service allowing users to steal Instagram social media accounts by entering their usernames. The aim of "Instagram Password Hacker" is to promote untrustworthy and malicious sites, namel
Search1.me is the address of a fake search engine. Typically, such web searchers are promoted by PUAs (Potentially Unwanted Applications) classified as browser hijackers. Search1.me has been observed being pushed by the Better Search browser hijacker. Browser hijackers promote fraudulent w
We inspected the "Verify Your Email Address" email and determined that it is spam. The letter states that the recipient's email account must be verified for security purposes. This spam mail operates as a phishing scam and aims to steal email passwords by promoting a fake sign-in webpage.
AppLovin is an adware-type application disguised as TikTok, a legitimate video-sharing social networking application. Research shows that cyber criminals behind this fake app target Jio users in India who use Android smartphones. Note that the TikTok app is banned in this country. After installati
In a striking demonstration of how cyber-threats adapt to emerging technologies, Microsoft's Incident Response team has uncovered a sophisticated new malware known as SesameOp, which uniquely exploits the OpenAI Assistants API for command-and-control (C2) operations. This discovery marks one of the
The emergence of the Atroposia malware marks another significant step forward in the evolution of cyber threats. Where earlier remote-access trojans (RATs) focused on giving attackers control over compromised computers, Atroposia takes it a step further by combining that control with active intellig
In recent quarters, ransomware threat actors have faced a steep drop in profits as an increasing number of victims refuse to pay. This decline has prompted cybercriminals to reassess their tactics and explore alternative avenues to regain leverage. Ransomware payment rates have sunk to record
In 2025, cybersecurity researchers uncovered a new and unusual scam from a Russian hacking group known as ColdRiver. The group, also known as Star Blizzard or the Callisto Group, had discovered a way to exploit one of the Internet's most familiar security tools, the "I am not a robot" CAPTCHA, and t
A recent campaign demonstrates how modern malvertising, ads pointing to malicious websites, can use legitimate search channels to trick technically sophisticated users into installing powerful macOS information-stealing malware. Operators bought Google Ads that pointed to convincing fake download p
Combo Cleaner is an anti-malware application for Windows computers (also available for Mac computers). It's developed by a company RCS LT which has been working in cyber security industry for over 10 years. The accumulated experience in internet security allowed us to create a robust anti-malware so
Download
Combo Cleaner is an antivirus and system optimizer created by a company called RCS LT. This application runs on Mac computers and works with all recent Mac operating systems, including Yosemite, macOS 13 Ventura, and macOS 14 Sonoma. This application takes a different approach as compared to tradit
Download
Avast has traditionally provided good protection against malware threats and a great-looking interface. However, it was often felt that users had to pay for that great interface over standout features It has also struggled to balance paid products and its free antivirus software. The free version