While inspecting untrustworthy websites, our researchers discovered the social-discovery[.]io rogue page. It is designed to load dubious content, promote spam browser notifications, and redirect visitors to other (likely unreliable/malicious) sites. Users typically enter social-discovery[.]io and
While inspecting dubious software promoting webpages, our research team discovered the Down Assist browser extension. It is endorsed as a tool capable of quickly providing alternative websites when the one users seek to access is down (unavailable). After analyzing Down Assist, we determined that
RedEngine is a ransomware-type program that we found while inspecting new malware submissions to VirusTotal. We determined that RedEngine is based on the Chaos ransomware. After we released a sample of RedEngine on our test system, it encrypted files and appended their filenames with an extension
ShoreCreative is a rogue application that we found while inspecting new submissions to VirusTotal. Our analysis of this app revealed that it operates as advertising-supported software (adware). It is noteworthy that certain factors may impact whether adware delivers intrusive advertiseme
Our inspection of the "SMTP/Sendmail Service is Disabled" email revealed that it is spam that operates as a phishing scam. These letters target recipients' email account log-in credentials by claiming that the ownership must be confirmed. The spam email claims that the recipient's mail ser
Nordteam is ransomware belonging to the Spora ransomware family. We discovered this variant while inspecting malware samples submitted to the VirusTotal page. Our team found that Nordteam encrypts files and appends four random characters to filenames as the extension. Also, it creates "ReadMe.hta"
DesignPaper is a piece of rogue software that our research team found while inspecting new submissions to VirusTotal. After analyzing this app, we determined that it is adware and belongs to the AdLoad malware family. Adware is designed to display adverts on visited websites and/or diffe
Dark-Display is described as an app that provides a dark mode for simple websites. After downloading and adding this app to a web browser, we learned that it shows unwanted advertisements. Thus, we classified Dark-Display as adware. Ads displayed by adware can open untrustworthy websites.
We have discovered the Dropbox Update Setup while examining various cracked software distribution websites. We have inspected the downloaded "Setup.exe" file and found that it runs in the Task Manager as "Dropbox Update Setup". It causes high CPU usage, which means it may be crypto-mining malware.
During a routine inspection of new malware submissions to VirusTotal, our research team discovered the EAF ransomware. After we launched a sample of EAF on our test system, we learned that it encrypts files and changes their filenames. File titles were prepended with the cyber criminals' email ad