Traders is ransomware that we discovered while inspecting malware samples uploaded to VirusTotal. Upon infiltration, Traders encrypts files and appends the victim's ID and the ".traders" extension to them. Also, the malware creates a ransom note, "README.TXT". An example of how Traders renames en
Cephalus is a malicious program classified as ransomware. Software within this classification is designed to encrypt files and demand payment for the decryption. On our test machine, Cephalus encrypted files and added a ".sss" extension to their names. To elaborate, a file originally titled "1.jp
Our review of hazzbonew[.]com reveals that the site uses clickbait to persuade visitors into allowing notifications. If permission is given, it can deliver deceptive alerts, such as fake system warnings, that may put users' privacy and security at risk. Therefore, it is strongly advised to avoid i
We have inspected the email and concluded that it is a scam. The message is disguised as a notification from the "Telex Coordination Section". Its purpose is to trick recipients into disclosing personal information and possibly transferring money to fraudsters. Thus, recipients should not reply to
Our researchers discovered this ididrophtwed.co[.]in rogue page while investigating dubious websites. Upon examination, we learned that it promotes browser notification spam and redirects to different (likely unreliable/harmful) sites. Ididrophtwed.co[.]in and analogous webpages are primarily ente
Charon is a ransomware-type program. This piece of malicious software is designed to encrypt data and demand ransoms for the decryption. After we executed a sample of Charon on our test machine, it encrypted files and added a ".Charon" extension to their filenames. For example, a file originally
Our analysis of dimulonprers.co[.]in shows that it employs clickbait tactics to trick visitors into enabling its notifications. Once permission is granted, the site can send misleading messages (e.g., fake system warnings), potentially exposing users to privacy and security threats. For this reaso
Souloquess.co[.]in is a rogue webpage discovered by our researchers during a routine inspection of suspicious sites. Upon investigation, we determined that this page endorses spam browser notifications and redirects users to other (likely dubious/harmful) websites. The majority of visitors to sou
We have analysed ravixnelo.co[.]in and found that it uses clickbait tactics to deceive visitors into allowing notifications. After gaining permission, the site can push deceptive alerts and other false messages. These notifications may lead to privacy and security risks, making it advisable to avo
Our research team found the harmonyboss[.]com rogue webpage while investigating suspicious sites. It is designed to promote browser notification spam and redirect visitors to other (likely dubious/malicious) websites. Most users access harmonyboss[.]com and similar pages via redirects produced by