During a routine inspection of new malware submissions to VirusTotal, our researchers discovered the Solution ransomware. It is part of the MedusaLocker ransomware group. This malicious software encrypts data and demands ransoms for its decryption. On our testing system, Solution encrypted files
During our examination of yourbrbads[.]com, we found that this page uses deception to lure visitors into permitting it to show notifications. Web pages of this kind should be avoided. Allowing them permission to send notifications can result in receiving fake warnings and other untrustworthy conte
Our team has analyzed inetaispially[.]com and discovered that it uses clickbait (a misleading tactic) to deceive visitors into accepting its notifications. Usually, when web pages like inetaispially[.]com obtain permission to deliver notifications, they send fraudulent warnings, alerts, and other
We have inspected the page (block-dagxyznetwork[.]live) and discovered that it promotes a fake presale of BlockDAG coins. This website is designed by scammers who seek to lure unsuspecting individuals into taking action that could result in significant financial losses. Users should avoid visiting
Our researchers found the o-video-live[.]com rogue page while inspecting suspicious websites. Upon examination, we determined that it promotes spam browser notifications and redirects visitors to different (likely unreliable/hazardous) sites. Users predominantly access pages like o-video-live[.]c
We discovered the "$W Token Distribution" scam, as endorsed on whitelistworm.pages[.]dev (note that it could be hosted elsewhere), during a routine inspection of untrustworthy websites. While the scheme presents users with an opportunity to receive W tokens, it functions as a crypto drainer. The
This "$PEPU Presale" is a scam. It is presented as a presale event for a memecoin. However, this fake site promotes a phishing scam targeting digital wallet log-in credentials. Victims of this scheme risk having their wallets hijacked and the funds stored therein – stolen. IMPORTANT NOTE: We
While browsing suspect websites, our researchers discovered this fake "Wallet Guard" page (walletguard-a6b.pages[.]dev; could be hosted elsewhere). It is disguised as a free tool for detecting various crypto-centered scams, including drainers. Instead of providing these services, the bogus webpag
Evidence Of Child Pornography ransomware is a type of malware designed to encrypt the victim's files. Also, this ransomware provides two ransom notes ("READ ME !.txt" and "[username]_GUI.html") and appends a random extension to filenames. For example, it renames "1.jpg" to "1.jpg.d3prU", "2.png" t
Our research team discovered strognethipst[.]com while investigating untrustworthy sites. This rogue webpage promotes browser notification spam and generates redirects to different (likely dubious/malicious) websites. Pages like strognethipst[.]com are most commonly accessed via redirects caused