Our researchers discovered xervoo[.]net while researching sites using rogue advertising networks. This page loads questionable content, promotes browser notification spam, and redirects visitors to various unreliable and malicious websites. When we were redirected to xervoo[.]net, it displ
Grind3lwald is a malicious program that we found when researching new submissions on VirusTotal. Having analyzed and researched Grind3lwald, we determined that it is Remote Access Trojan (RAT). Malware of this type is designed to enable remote access and control over infected devices. RATs usuall
Youtubemp3[.]to is a website offering to convert YouTube video links to downloadable audio files. This service is illegal as it breaks copyright laws. Having researched this site, we have noted that youtubemp3[.]to also uses rogue advertising networks. Therefore, visitors to this website can get r
"Clean Up Your Windows PC After Surfing The Web!" is a pop-up message displayed by a shady website that we have discovered while visiting pages that use shady advertising networks. After analyzing this shady page, we found that it is a technical-support scam designed to trick visitors into calling
9anime[.]to is an anime streaming website that uses rogue advertising networks and distributes content without permission from the property owners. We have tested this page and seen it opening other websites in a new browser tab. Pretty often, pages that use such advertising networks are used to p
Our research team analyzed the listenvid[.]com website and concluded that visiting/using it endangers device and user safety. This site offers to convert YouTube, Dailymotion, Vimeo, Facebook, Metacafe, VK, SoundCloud, Instagram, and Twitter videos (via URLs) to downloadable audio and video files
We have examined the Azazel ransomware (file-encrypting malware) and learned that it belongs to a family of ransomware called Chaos. We also found that it renames encrypted files by appending the ".Azazel" extension, creates the "read_it.txt" file (which contains a ransom note), and changes the de
After installing the Best-CouponSearch browser extension onto our test system, we noticed unwanted redirects to the best-couponsearch.com fake search engine. This was caused by modifications the extension made to browser settings. The described behavior classifies Best-CouponSearch as a browser hi
Our team has discovered the NodeStatisticsProjector application while inspecting samples submitted to VirusTotal. We have examined NodeStatisticsProjector and found that it has traits of an advertising-supported and browser-hijacking application. It displays ads and promotes a fake search engine
Qqqe is a ransomware-type program designed to encrypt data and make ransom demands for the decryption. While analyzing it, we learned that it is yet another program belonging to the Djvu ransomware family. On our test machine, it encrypted files and appended them with the ".qqqe" extension. For e