Our researchers discovered Anomaly ransomware while browsing new submissions to the VirusTotal website. Upon inspection, we determined that this malicious program is based on Chaos ransomware. This malware is designed to encrypt data and demand payment for the decryption. After we executed Anomal
We have tested the NetEngine application and discovered that it displays intrusive and annoying advertisements. Apps of this type are classified as adware. Additionally, we found that multiple security vendors flag NetEngine as malicious. Thus, it is highly advisable to avoid installing it.
Our researchers found the ValidWindow app during a routine review of new file submissions to the VirusTotal platform. Upon examination, we determined that this application is adware. ValidWindow is part of the AdLoad malware family. Adware stands for advertising-supported software. It pr
"Update Server Terms Now" is a phishing email that targets account log-in credentials (passwords). This spam message informs the recipient that their email account will supposedly be terminated unless they take the appropriate actions. The spam email with the subject "Email termination is
Our examination of the "Email Verification Campaign" message revealed that it is spam. This letter is presented as a verification process alert for email activity. The purpose of this mail is to deceive recipients into providing their email passwords to a phishing website. This scam messag
Acrid is a malicious program that is classified as a stealer. It is written in the C++ programming language. This stealer has been around since at least 2023. As the classification implies, Acrid is designed to steal sensitive information from infected devices and the software installed on them.
Fira App is a Potentially Unwanted Application (PUA). Our researchers discovered its installer on a scam page force-opened by a Torrenting website (that utilizes rogue advertising networks), which the team was inspecting. PUAs typically have harmful capabilities, and we found that Fira App acts a
Our team has examined the email and concluded that it is a phishing email designed to appear like a notification regarding a "timesheet report". The scammers behind it aim to lure recipients into opening the included link and entering personal information on a fake website. This email should be ig
Animaltabnow[.]com is a fake search engine. It cannot provide search results and redirects to legitimate Internet search websites. Additionally, fraudulent sites of this kind tend to gather visitor data. Illegitimate search engines are commonly endorsed by browser hijackers. Our researchers disco
We have examined flyfreeads[.]top and discovered that its purpose is to obtain permission to show notifications. The page uses clickbait to trick visitors into granting it this permission. Usually, notifications from sites like flyfreeads[.]top are deceptive. Thus, flyfreeads[.]top should never be