We have inspected respraccipsaurs[.]com and concluded that its goal is to trick visitors into accepting its notifications. If allowed, respraccipsaurs[.]com can show misleading alerts and similar messages. These notifications contain links to potentially malicious sites. Thus, respraccipsaurs[.]co
During our inspection of malware samples uploaded to VirusTotal, we discovered BOBER, a variant of the CONTI ransomware. Once executed on the device, BOBER encrypts files and appends its extension to them. It also provides a ransom note ("R3ADM3.txt"). BOBER appends a string of random characters t
Our research team discovered the brobitte.co[.]in rogue page while investigating suspicious websites. Upon inspection, we learned that this webpage promotes browser notification spam and redirects visitors to other (likely dubious/dangerous) sites. The majority of visitors to brobitte.co[.]in and
Our researchers discovered this "Solana (SOL) Rewards" webpage during a routine investigation. This deceptive page promises "special rewards". It must be emphasized that this bogus rewards program is not associated with the real Solana platform. The purpose of this site is to trick users into expo
Our analysis shows that gojogo-messaging[.]com is used to deceive visitors into allowing notifications. Once granted permission, it can send misleading alerts and similar messages that may lead to unreliable or harmful websites. For this reason, users should avoid visiting gojogo-messaging[.]com a
Our researchers discovered the Tiger ransomware during a routine inspection of new submissions to the VirusTotal website. This malicious program is part of the GlobeImposter ransomware family. On our test machine, Tiger encrypted files and appended their filenames with a ".Tiger4444" extension. T
Our researchers found this ransomware – Cybertron – while inspecting new submissions to the VirusTotal platform. This program belongs to the MedusaLocker ransomware family. Cybertron is designed to encrypt files and demand ransoms for the decryption. After we executed a sample of this ransomware
While investigating suspicious websites, our researchers found the glspromo[.]com rogue webpage. It operates by promoting spam browser notifications and redirecting visitors to other (likely dubious/dangerous) pages. Glspromo[.]com and analogous webpages are primarily accessed through redirects ge
We have examined the email and concluded that it is disguised as a notice of irregularity from the "Air Transport Association". The scammers behind it likely seek to trick recipients into disclosing personal information or transferring money (paying for fake services). This email should be ignored
Goinroads[.]com is a rogue website intended to trick users into receiving browser notification spam. It can also produce redirects to other (likely untrustworthy/dangerous) sites. Most visitors to goinroads[.]com and analogous pages access them through redirects generated by websites employing ro