We have examined this email and learned that this is a fake notification letter regarding an unauthorized login attempt. It contains a link to a phishing site (disguised as a legitimate blockchain[.]com website). Scammers behind this email attempt to steal blockchain[.]com accounts. Blockc
We have discovered searchtoolshub.com after using a browser-hijacking installer downloaded from a website promoted via other sites that use questionable advertising networks. After testing the searchtoolshub.com address, we learned that it is a fake search engine. Searchtoolshub.com is a f
We have examined this email and found that it is disguised as a letter from Microsoft regarding account password expiry. It contains a hyperlink that opens various untrustworthy websites (phishing pages, download sites for shady software, etc.). The actual Microsoft company has nothing to do with
EnumeratorConnectivity is a rogue app that our researchers found while inspecting new submissions to VirusTotal. We determined that this application operates as adware. Additionally, we learned that EnumeratorConnectivity belongs to the AdLoad malware family. EnumeratorConnectivity is de
F**k3dup ransomware (its name is censored) is malware that encrypts files. We have discovered it while checking VirusTotal for recently submitted malware samples. It was found that F**k3dup blocks access to files, appends its extension to filenames, and creates a text file "КАК РАСШИФРОВАТЬ ФАЙЛЫ.
We have discovered the Iiof ransomware while analyzing the samples submitted to VirusTotal. Our malware researchers learned that Iiof encrypts files, appends the ".iiof" extension to filenames, and generates a text file ("_readme.txt") containing a ransom note. An example of how Iiof renames file
We discovered the BinaryEngine application while inspecting new submissions to VirusTotal. After analyzing this app, we determined that it operates as advertising-supported software (adware). This piece of software also belongs to the AdLoad malware family. Once installed onto our test m
"DHL Shipment Details" refers to a fake email using the name of DHL - courier and deliver company - for nefarious purposes. It must be emphasized that this letter is in no way associated with either DHL or Deutsche Post. After analyzing this email, we have determined that it operates as a phishing
Datingtorrid[.]top is a rogue site that our research team discovered through a scam email promoting it. This page is designed to push spam browser notifications and redirect visitors to untrustworthy/harmful websites. Rogue webpages can also be accessed via mistyped URLs or redirects generated by
CryptoTab Browser is the name of a Chromium-based browser. Its official page states that it is a lightweight browser that mines cryptocurrency. After examining the app, we found that it promotes cleanbrowser.network, a fake search engine. Our team has checked the CryptoTab Browser's defaul