AppLite Banker (an updated variant of the Antidot) is a banking trojan targeting Android users. Cybercriminals deliver the malware via email by tricking victims into downloading fake applications. Once injected, AppLite Banker allows the attackers to perform a variety of malicious activities, incl
Our research team discovered RedLocker while reviewing new file submissions to the VirusTotal site. This program is classed as ransomware, and as such it encrypts files and requests payment for the decryption. After we executed a sample of RedLocker on our test machine, it encrypted files and app
We have tested the Neptune | Ad Blocker extension and found that it functions as adware (and has additional capabilities). This means that Neptune | Ad Blocker generates advertisements (even though it is supposed to block them). Users should not trust adware-type extensions and should remove them
Help_restoremydata is a ransomware-type program discovered by our researchers during a routine inspection of new submissions to the VirusTotal platform. Ransomware encrypts files and demands payment for the decryption. On our testing system, Help_restoremydata encrypted files and appended their n
We have analyzed this scam and concluded that it is designed to extract money (and some information) from unsuspecting individuals. Fraudsters behind this scam use deceptive emails to promote their scheme. Users should be able to recognize such scams to prevent financial loss and other problems.
Our inspection of chtneomulic[.]com has shown that the site uses clickbait to receive permission to send notifications to users. It is highly advisable not to permit such pages to show notifications, as it may result in exposure to various online risks. Overall, chtneomulic[.]com and similar web p
We have examined protocolchainflow[.]com and discovered that it displays misleading messages (fake warnings) and wants to show notifications. Agreeing to receive notifications from protocolchainflow[.]com can result in exposure to various scams and other deceptive content. Our inspection h
Enhanceprotocol.co[.]in is a rogue webpage designed to promote browser notification spam and generate redirects to other (likely untrustworthy/dangerous) sites. Users primarily access pages of this kind through redirects caused by websites that employ rogue advertising networks. In fact, our rese
While investigating suspicious sites, our research team discovered this fake "Blockcast Boost Reward" webpage (rewards.blockcasts[.]network; could be hosted on other domains). This scheme impersonates the real Blockcast website (blockcast.network). It must be stressed that this scam is not associ
Our researchers discovered the feelflashlight[.]info rogue webpage while browsing dubious sites. After inspecting it, we determined that this page endorses spam browser notifications and generates redirects to different (likely unreliable/hazardous) websites. Feelflashlight[.]info and similar web