Babesroulette[.]com is a rogue webpage designed to promote questionable content, push browser notification spam, and redirect visitors to other (likely untrustworthy/harmful) sites. Our research team discovered this page during a routine inspection of shady websites. Visitors to babesroulette[.]c
Discovered by our researchers while inspecting shady websites, emicalcove[.]xyz is a rogue page designed to push browser notification spam and redirect visitors to untrustworthy/malicious sites. Most users enter emicalcove[.]xyz and similar webpages via others that use rogue advertising networks.
Anime is the name of a ransomware-type program our research team discovered while checking out new submissions to VirusTotal. After launching a sample onto our test system, we learned that this ransomware appends the filenames of encrypted files with a ".anime" extension. For example, a file init
Satunians[.]com is a website that our team has discovered while analyzing various illegal movie streaming, torrent sites, and similar pages that use shady advertising networks. It was found that satunians[.]com displays deceptive content to get permission to show notifications and opens untrustwor
After analyzing the "Validate Now" email, we determined that it is a phishing email. This letter attempts to lure recipients into providing their email log-in credentials by claiming that their email accounts will be closed. The "Validate Now" letter states that the recipient's email accou
Our malware researchers have discovered the SearchTab Default Search browser extension while examining questionable websites that use advertising networks. They found that this app promotes searchtab.xyz (a fake search engine) by changing the settings of a browser. Thus, it was concluded that Sear
ZEON was discovered by dnwls0719. After doing our research, we learned that ZEON is ransomware written in the Python programming language. It encrypts files, changes the desktop wallpaper, and appends the ".zeon" extension to filenames. For instance, it renames "1.jpg" to "1.jpg.zeon", "2.png" to
Our researchers discovered the Pro Dark browser extension while inspecting content promoted by deceptive download webpages. This piece of software promises to enable dark mode for websites. However, after analyzing Pro Dark, we determined that it operates as adware. Following successful in
NOKOYAWA is a piece of malicious software classified as ransomware, which our research team found and sampled from VirusTotal. It is designed to encrypt data and demand payment for the decryption. On our test machine, this ransomware encrypted files and appended their filenames with a ".NOKOYAWA"
Our team has examined this email and learned that scammers use it to steal sensitive information. It is disguised as a letter from Microsoft. It also contains a hyperlink designed to open a phishing website requesting an email address and password. The email is disguised as a letter regard