During a routine inspection of new malware submissions to VirusTotal, our research team discovered the EAF ransomware. After we launched a sample of EAF on our test system, we learned that it encrypts files and changes their filenames. File titles were prepended with the cyber criminals' email ad
DevelopEfficient is an application that our team has discovered while examining deceptive web pages. We have tested this app and found that it displays annoying advertisements. Software of this type is called adware. Typically, users install software of this type unintentionally. In most
Bhrnkw[.]com is a rogue webpage that our research team found while inspecting dubious sites. It operates by promoting spam browser notifications and redirecting visitors to other (likely untrustworthy/malicious) websites. Most users enter pages like bhrnkw[.]com via redirects caused by websites us
Our researchers found the DigitalPaper application during a routine inspection of new submissions to VirusTotal. Our analysis of this app revealed that it operates as advertising-supported software (adware) and belongs to the AdLoad malware family. Adware enables the placement of various
To go web is a rogue browser extension. After analyzing this piece of software, we determined that it operates as a browser hijacker. To go web modifies browser settings to promote the togosearching.com fake search engine. Additionally, this browser hijacker spies on users' browsing activity.
Safemacpc[.]xyz displays deceptive content (runs the "McAfee - Your PC is infected with 5 viruses!" scam) and asks for permission to show notifications. It uses a scare tactic to promote legitimate software. It is operated by affiliates who aim to collect illegitimate commissions. Our team has di
While examining various shady/deceptive web pages, our team discovered an application called MajorSector. After installing and analyzing this app, they found that it generates advertisements. They also noticed that it can access sensitive information. Our malware researchers have classified Majo
While inspecting new submissions to VirusTotal, our research team discovered yet another malicious program based on Chaos ransomware. This ransomware-type program is called BlackToxic. We obtained a sample of it from VirusTotal and ran it in our test system. BlackToxic encrypted files and appende
BlueShtorm is an information-stealing malware discovered by 3xp0rt. It is not known at this time what information this malware collects. Usually, information stealers target data that could be misused to steal money and (or) identities, hijack personal accounts, make fraudulent purchases, or black
While inspecting deceptive sites, our researchers discovered the "Congratulations You just received TetherUSDT" scam. It is yet another phishing scam targeting cryptocurrency wallet credentials. When we accessed a website running this scam, it presented us with a statement claiming that th