The s3.amazonaws[.]com website has been identified as proliferating a variety of unwanted and malicious content. It is hosted by Amazon AWS (Amazon Web Services), a legitimate service intended to provide various IT-related resources/functionalities, however, it is commonly misused by cyber crimi
"LAB Bot" email is a scam message. Its misleading subject/title suggests that the email is from Amazon Delivery Support, however, it has nothing to do with this company. The message is not from Amazon or associates, and the content has no connection with them. The body of the message claims to be
The Power Search app is categorized as a browser hijacker. There are two main reasons for this classification: it promotes a fake search engine by changing browser settings and gathers browsing data. Browser hijackers are termed 'potentially unwanted applications' (PUAs), since people often downlo
CentralLocator is the name of a potentially unwanted application (PUA) that is categorized as adware. This program supposedly enhances the browsing experience, however, it serves intrusive advertisements and gathers various information. Adware-type apps are termed 'PUAs', since people usually do
android-recaptcha[.]info is a rogue website. Like many similar websites, it redirects visitors to other untrustworthy web pages or loads dubious content. Some examples of other sites that operate in this manner include find-soulmates[.]com, best-girls-ever[.]com and hellopushworld[.]com. Web brow
Discovered by GrujaRS. Horriblemorning is malicious software belonging to the GlobeImposter ransomware family. This malware is designed to encrypt data and demand ransom payments for decryption. During the encryption process, all files are are appended with the ".Horriblemorning" extension. There
mainsourceofupdates[.]best is a deceptive website claiming that Adobe Flash Player is outdated. It operates by encouraging users into downloading/installing a fake Flash Player updater. The rogue update installers are high-risk, since they are used to proliferate Potentially Unwanted Applicatio
Legion Loader is a malicious program designed to infect systems with 2-3 other programs of this type (or more). Research shows that Legion Loader is used to spread information stealers (such as Vidar, Predator the Thief and Raccoon Stealer), backdoors, cryptocurrency stealers and a cryptocurrency
R00t is a malicious program belonging to the Paradise ransomware family. It is designed to encrypt the data of infected systems so that ransom demands can be made for decryption software. During encryption, all affected files are renamed according to the following pattern: "_r00t_{random string}.n
This spam campaign is disguised as an invitation to "the biggest climate protest". Cyber criminals behind it seek to trick recipients into opening the attached document or website link, and then installing Emotet. Note that Emotet is a malicious program categorized as Trojan. It is designed to st