After downloading and installing the SearcheeBoo! application, we learned that it is designed to hijack web browsers. This application forces users to browse the web with a fake search engine (searcheeboo.com). It promotes searcheeboo.com by changing the settings of a web browser. Searchee
ProgressionLegion is a rogue app that our researchers found while inspecting new submissions to VirusTotal. After analyzing this piece of software, we determined that it operates as adware and belongs to the AdLoad malware family. Adware-delivered advertisements promote untrustworthy/har
Push-detectors[.]com is an untrustworthy website that displays deceptive content to trick visitors into agreeing to receive notifications. Moreover, it redirects to other websites of this kind. Our team has discovered push-detectors[.]com while examining pages that use rogue advertising networks.
Tacklingallas[.]com is a rogue page that our researchers discovered while inspecting dubious websites. It operates by pushing browser notification spam and redirecting visitors to different (likely unreliable/malicious) sites. Most users typically enter webpages of this kind through redirects caus
SampleLight is an adware-type application designed to generate intrusive advertisements. Like most apps of this type, SampleLight is distributed using shady methods. Our malware researchers have discovered SampleLight adware while inspecting deceptive pages suggesting that visitors must update t
Nerybelfaste[.]xyz is a website designed to trick visitors into allowing it to show notifications. We have discovered it while analyzing pages that use rogue advertising networks (e.g., illegal movie streaming pages, torrent sites). Additionally, nerybelfaste[.]xyz redirects visitors to other shad
FortSearch is a piece of rogue software. After analyzing it, we determined that this extension operates as a browser hijacker. FortSearch makes alterations to browser settings in order to promote (by causing redirects to) the fortsearch.xyz fake search engine. Once installed onto our test
WanaCray2023+ is ransomware that belongs to the Xorist ransomware family. We have discovered this variant while examining malware samples submitted to the VirusTotal website. It was found that WanaCray2023+ encrypts files and appends the ".WanaCray2023+" extension to their filenames. Also, WanaCr
Live-Secure is a browser hijacker that our team has discovered while examining questionable web pages. After installing this application, we found out that it hijacks a web browser by changing some of its settings to live-secure.xyz - it promotes a fake search engine. Live-Secure promotes
News-jivuka[.]cc is a rogue site designed to promote browser notification spam and redirect visitors to other (likely untrustworthy/malicious) webpages. Our research team discovered this page while inspecting websites using rogue advertising networks. Most users enter news-jivuka[.]cc and similar