Our researchers discovered the OpticalDevice rogue application while browsing new submissions to the VirusTotal website. Upon inspection, we determined that it is adware from the AdLoad malware family. Advertising-supported software is designed to run intrusive advertisement campaigns and may po
We have tested SectionData and discovered that it delivers unwanted advertisements, and multiple security vendors flag the app as malicious. The ads displayed by SectionData can contain fake warnings and other misleading content to trick users into opening deceptive pages or taking other actions
EagerBee is a backdoor-type malware. Software within this category is designed to open a "backdoor" into targeted systems. Some backdoors can further the infection themselves (i.e., download/install additional malware), which applies to EagerBee. Attacks involving this program have been observed
Cloak is a malicious program categorized as ransomware. This malware is designed to encrypt data and demand ransoms for its decryption. On our testing system, Cloak encrypted files and added a ".crYpt" extension to their names, e.g., "1.jpg" appeared as "1.jpg.crYpt", "2.png" as "2.png.crYpt", etc
Our researchers discovered uptotheminute[.]site while browsing untrustworthy websites. Upon investigation, we learned that this rogue page promotes browser notification spam and generates redirects to other (likely dubious/dangerous) sites. Most visitors access uptotheminute[.]site and similar we
OnlineDeveloper is an adware-type application that our researchers discovered while investigating new file submissions to the VirusTotal platform. This app is part of the AdLoad malware family. Advertising-supported software is designed to generate revenue for its developers. Adware stan
During our analysis of dailybuzznews[.]site, we found that it uses clickbait, a misleading method, to lure visitors into accepting its request to show notifications. Notifications from shady pages like dailybuzznews[.]site usually contain misleading content to trick users into interacting with the
ArrayEngine is a rogue app discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. After analyzing this application, we determined that it is advertising-supported software (adware) belonging to the AdLoad malware family. Adware stands for
VirtualProcesser is a rogue application discovered by our research team during a routine inspection of new submissions to the VirusTotal website. After examining the software, we learned that it is adware from the AdLoad malware family. Advertising-supported software is designed to generate reve
We have tested AgentFrame and discovered that its main functionality is to display annoying and potentially misleading advertisements that may expose users to online threats. Also, our analysis has shown that security vendors flag AgentFrame as malicious. Given these risks, users should avoid in