While inspecting deceptive download webpages, our researchers discovered the "more styles" browser extension. It promises to allow users to customize website appearance, e.g., changing the page's hue, color opacity, etc. After analyzing this piece of software, we learned that it operates as adware
Pay2Decrypt is the name of a malicious program categorized as ransomware. Malware of this type is designed to encrypt data and demand ransoms for the decryption. We executed a sample of Pay2Decrypt on our test machine, and this ransomware encrypted files and changed their filenames. The original
SafeSoft PC Cleaner is advertised as a program that makes a computer fast and secure (that cleans and optimizes a computer). We have found that a few security vendors on the VirusTotal page flagged its installer (and the program itself) as malicious. We recommend not to use programs of this kind.
Filmatory is a rogue browser extension that our research team discovered while inspecting untrustworthy download webpages. This extension promises to allow quick access to movie-related online content. After analyzing Filmatory, we learned that it operates as advertising-supported software (adware
After analyzing this email, we have concluded that it is a phishing email disguised as a letter regarding a Netflix subscription. Scammers behind this email attempt to trick recipients into opening a deceptive page (a fake Netflix website) and providing login credentials on it. This email must be
While inspecting dubious software promoting websites, our research team discovered the SkipTheAdz browser extension. This piece of software promises to skip advertisements automatically (e.g., YouTube ads). However, SkipTheAdz displays adverts instead (operates as adware). Furthermore, this browse
Can I locate it is a browser extension described as a tool for locating active websites. We have discovered this app while examining deceptive pages. After downloading and adding the Can I locate it application, we found that it displays unwanted advertisements. Thus, we categorized this app as ad
Our researchers discovered the browser-under-protection[.]com rogue website during a routine inspection of untrustworthy pages. It is designed to promote scams, push browser notification spam, and redirect to other (likely dubious/malicious) sites. These webpages are typically accessed via redire
Rapid Files Download is an application described as a tool allowing users to keep track of downloads and quickly access and manage them and create new downloads. Our team has discovered this app on a deceptive page that suggests that it may be required to add it to a browser. After downloading and
Z61yt is ransomware that belongs to the Hive ransomware family. Our team discovered Z61yt while examining malware samples submitted to the VirusTotal page. This ransomware encrypts files and appends a string of random characters and the ".z61yt" extension to filenames. Also, Z61yt creates the "1uZ