We have discovered SSJ while analyzing the samples submitted to VirusTotal. It was concluded that SSJ is ransomware - malware that encrypts files. Additionally, SSJ appends the ".BUYBITCOIN" extension to filenames (for example, it renames "1.jpg" to "1.jpg.BUYBITCOIN", "2.png" to "2.png.BUYBITCOIN
During a routine inspection of untrustworthy websites, our research team found the mywebprotector[.]com page. This site promotes deceptive material, pushes browser notification spam, and redirects visitors to other unreliable and malicious webpages. While most users enter pages like mywebprotecto
Our team has discovered an adware-type application named ReviewVenture while inspecting the samples submitted to VirusTotal. Since ReviewVenture is adware, its purpose is to generate advertisements. In most cases, adware gets downloaded and installed inadvertently (it is promoted/distributed usi
While inspecting new submissions on VirusTotal, our researchers discovered the SolveCenter application. After analyzing it, we learned that SolveCenter operates as adware and is part of the AdLoad malware family. Adware can require certain conditions to run intrusive advertisement campai
Our malware researchers have discovered Vyia while checking the samples submitted to VirusTotal. They found that Vyia is ransomware that encrypts files, changes their extension, and creates the "_readme.txt" file. An example of how Vyia renames files: it changes "1.jpg" to "1.jpg.vyia", "2.png" t
Deeginews[.]com displays deceptive content to trick visitors into agreeing to receive notifications and redirects to shady websites. Our team has discovered deeginews[.]com while analyzing other sites that use rogue advertising networks. In most cases, sites like deeginews[.]com get visited uninte
We learned of D3adCrypt when a victim reported it in a support forum. This malicious program is categorized as ransomware; it operates by encrypting data and making ransom demands for the decryption. Our researchers obtained a sample of D3adCrypt from VirusTotal. On our test machine, this ransomw
QuantityExact is an adware-type application that our researchers discovered while looking through new submissions to VirusTotal. We also learned that this piece of software belongs to the AdLoad malware family. Adware can require certain conditions to be met to run intrusive advert campa
Colibri is the name of a malware loader - a piece of software that drops the actual malicious content on the operating system. We have discovered Colibri on hacker forums. Our team has found that cybercriminals sell it for $150 for a week and $400 for a month (and offer free updates). Colibri targ
Our research team discovered Kera-tx52 while inspecting new submissions to VirusTotal. This malicious program is classified as ransomware - a type of malware that encrypts data (renders it inaccessible) to make ransom demands for the decryption. On our test system, Kera-tx52 encrypted files and a