Discovered by our research team while inspecting untrustworthy websites, secureform[.]xyz is a rogue page that loads dubious material, promotes browser notification spam, and redirects visitors to various unreliable/malicious sites. Webpages like secureform[.]xyz are usually accessed via sites tha
While checking out new submissions on VirusTotal, our researchers found the PremiumLatest application. After analyzing it on our test system, we have determined that it is an advertising-supported software (adware). PremiumLatest also belongs to the AdLoad malware family. Adware may requ
During a routine inspection of new malware submissions on VirusTotal, our researchers found another malicious program belonging to the Djvu ransomware family. It is called Bbbe, and our test system it encrypted files and appended their names with a ".bbbe" extension. For example, a file initially
Bbbr is the name of ransomware that our team has discovered while inspecting the malware samples recently submitted to VirusTotal. We have found that Bbbr is part of the Djvu ransomware family. It is designed to encrypt files, append the ".bbbr" extension to filenames, and create the "_readme.txt"
SearchGamesOnline is a rogue browser extension. After analyzing it, our researchers determined that it is a browser hijacker that promotes the searchgamesonline.com fake search engine. Installed onto our test machine, SearchGamesOnline reassigned browsers' homepage, new tab/window, and def
We have discovered the Kings ransomware while checking VirusTotal for recently submitted malware samples. While analyzing the Kings ransomware, we have learned that it encrypts files and appends the ".kings" extension to filenames (for example, renames "1.jpg" to "1.jpg.kings", "2.jpg" to "2.jpg.k
PENTAGON is a Remote Access Trojan (RAT), malware designed to allow stealthy remote access/control over infected systems. Our researchers obtained PENTAGON's sample when its developers promoted and shared it on Reddit and Twitter. PENTAGON can enable close to user-level access over comprom
We have examined this email and concluded that it is a phishing scam used to trick unsuspecting recipients into opening a deceptive website and providing their PayPal login credentials. In order to make this phishing email legitimate, scammers use the real PayPal logo in it. The email stat
Our researchers periodically inspect suspicious websites, and b-cdn[.]net is a new find from one of these inspections. B-cdn[.]net is a rogue page that loads dubious content (e.g., "Your McAfee Subscription Has Expired" scam), pushes its browser notifications, and redirects visitors to other untru
We have encountered this scam while clicking on shady ads and visiting untrustworthy pages that use rogue advertising networks. After examining this pop-up scam, we learned that its purpose is to trick visitors into calling scammers. We also found that this page is hosted using the AmazonAWS servi