Dark-Display is described as an app that provides a dark mode for simple websites. After downloading and adding this app to a web browser, we learned that it shows unwanted advertisements. Thus, we classified Dark-Display as adware. Ads displayed by adware can open untrustworthy websites.
We have discovered the Dropbox Update Setup while examining various cracked software distribution websites. We have inspected the downloaded "Setup.exe" file and found that it runs in the Task Manager as "Dropbox Update Setup". It causes high CPU usage, which means it may be crypto-mining malware.
During a routine inspection of new malware submissions to VirusTotal, our research team discovered the EAF ransomware. After we launched a sample of EAF on our test system, we learned that it encrypts files and changes their filenames. File titles were prepended with the cyber criminals' email ad
DevelopEfficient is an application that our team has discovered while examining deceptive web pages. We have tested this app and found that it displays annoying advertisements. Software of this type is called adware. Typically, users install software of this type unintentionally. In most
Bhrnkw[.]com is a rogue webpage that our research team found while inspecting dubious sites. It operates by promoting spam browser notifications and redirecting visitors to other (likely untrustworthy/malicious) websites. Most users enter pages like bhrnkw[.]com via redirects caused by websites us
Our researchers found the DigitalPaper application during a routine inspection of new submissions to VirusTotal. Our analysis of this app revealed that it operates as advertising-supported software (adware) and belongs to the AdLoad malware family. Adware enables the placement of various
To go web is a rogue browser extension. After analyzing this piece of software, we determined that it operates as a browser hijacker. To go web modifies browser settings to promote the togosearching.com fake search engine. Additionally, this browser hijacker spies on users' browsing activity.
Safemacpc[.]xyz displays deceptive content (runs the "McAfee - Your PC is infected with 5 viruses!" scam) and asks for permission to show notifications. It uses a scare tactic to promote legitimate software. It is operated by affiliates who aim to collect illegitimate commissions. Our team has di
While examining various shady/deceptive web pages, our team discovered an application called MajorSector. After installing and analyzing this app, they found that it generates advertisements. They also noticed that it can access sensitive information. Our malware researchers have classified Majo
While inspecting new submissions to VirusTotal, our research team discovered yet another malicious program based on Chaos ransomware. This ransomware-type program is called BlackToxic. We obtained a sample of it from VirusTotal and ran it in our test system. BlackToxic encrypted files and appende