Our team has discovered a new ransomware variant belonging to the Djvu family called Qpss. The purpose of Qpss is to encrypt files. Additionally, it appends the ".qpss" extension to filenames and creates the "_readme.txt" file (a ransom note). We have found this ransomware while examining malware
Systemsecuritys[.]com is a rogue webpage that our researchers found while inspecting dubious websites. This page is designed to load deceptive material, push browser notification spam, and redirect visitors to other (likely unreliable/malicious) sites. Most users enter systemsecuritys[.]com and s
After inspecting this "PancakeSwap" email, our researchers determined that it is spam that operates as a phishing scam. The letter claims that the recipient's cryptocurrency wallet will be suspended if it is not validated. This spam mail promotes a phishing page, which closely mimics the genuine P
FFDroider is a malicious program classified as a stealer. It is designed to extract and exfiltrate sensitive data from infected devices. FFDroider targets popular social media and e-commerce platforms in particular. FFDroider has been observed evading detection by masquerading as the Teleg
Datasecuritycentr[.]com is a deceptive website running the "McAfee - Your PC is infected with 5 viruses!" scam. It also asks for permission to show untrustworthy notifications. Our team has discovered datasecuritycentr[.]com while inspecting illegal movie streaming, torrent, and similar sites.
Octo is the name of the Android malware, a banking Trojan targeting Android users. Octo is pretty similar to another banking Trojan called ExobotCompact that was active until 2018 and targeted financial institutions. Octo banking Trojan has a remote access capability and uses anti-detectio
During a routine inspection of untrustworthy websites, our researchers found the "Norton Security Update Is Available Now" scam. It falsely implies that the visitor's Norton anti-virus is outdated and urges them to renew their subscription. The scam claims that a new update is available fo
We inspected this email and concluded that it is a phishing email used to steal email account login credentials. It is disguised as a letter from an email service provider. It contains a website link designed to open a phishing page asking to provide a password. This letter claims that the
While inspecting sites that use rogue advertising networks, our research team encountered a webpage promoting the "McAfee Total Protection has expired" scam. We have found two variants of this scheme, which claim that the visitor's McAfee anti-virus subscription has expired and urge them to renew
GeneralProjectSearch is a rogue application that our researchers found while inspecting deceptive websites promoting fake Adobe Flash Player updates. After testing this piece of software, we determined that it is an adware-type app belonging to the AdLoad malware family. It is noteworthy