"I have been watching you" is a spam email our researchers have classified as a sextortion scam. This letter falsely claims that there is proof of the recipient's infidelity and threatens to leak it - unless a payment is made. It must be emphasized that this mail is merely a scam, and none of its
Oslapisavkusna is a ransomware-type program that we found while inspecting new malware submissions on VirusTotal. We determined that this malicious program is part of the ZEPPELIN ransomware family. When we launched a sample on our test system, it encrypted files and appended their filenames with
We have discovered the multisearch.live application while visiting shady websites. After testing the app, we have learned that it changes the settings of a web browser to promote search.multisearch.live - a fake search engine. In other words, we have found that this app functions as a typical brow
Send dark is the name of a browser extension advertised as a tool capable of creating a dark mode for simple design websites. After analyzing this piece of software, our researchers determined that it is a browser hijacker. Send dark modifies browsers in order to promote the getsins.com illegitima
Lmonopolic[.]com is an untrustworthy page that is promoted through other pages that use shady advertising networks. We have discovered lmonopolic[.]com while checking various illegal movie streaming and torrent sites. After examining this page, we have learned that it attempts to get permission to
Socerapp[.]xyz is a deceptive website designed to display a fake system notification claiming that a network has been hacked. The purpose of this scam is to trick users into installing an application that is supposed to fix the aforementioned problem. We have discovered this pop-up scam while ex
Our malware researchers have discovered the CoinCycling while inspecting download websites for cracked software and fake pop-ups offering to update the installed software. We have tested CoinCycling and found that it is designed to generate advertisements - it functions as adware. Our te
ObjectRemote is a rogue application our researchers found while inspecting new submissions on VirusTotal. We determined that this app is a piece of advertising-supported software (adware), and it also belongs to the AdLoad malware family. ObjectRemote is designed to run intrusive adverti
miK is the name of ransomware that our malware researchers have discovered while examining the malware samples submitted to VirusTotal. We have found that miK is part of the Xorist ransomware family. It encrypts files, appends the ".miK" extension to filenames, changes the desktop wallpaper, displ
Our researchers found Nwgen while inspecting new submissions to VirusTotal. This malicious program is categorized as ransomware. On our test system, Nwgen encrypted files and appended their filenames with a ".nwgen" extension. For example, a file initially titled "1.jpg" appeared as "1.jpg.nwgen"