While investigating suspicious websites, our research team discovered a group of rogue webpages sharing the "first-tl" domain. First-tl-139-d[.]buzz is an example of a page belonging to this family; the numbers and/or the letter in these domains can differ. The goal of first-tl webpages is to tri
Our team has examined gamadshub[.]com and found that this page employs clickbait to receive permission to send notifications. In most cases, notifications from websites like gamadshub[.]com are misleading and promote shady sites. Thus, users should not agree to receive them and should avoid visiti
Our researchers discovered RDP ransomware while reviewing malware submissions to VirusTotal. This malicious program belongs to the Chaos ransomware family. RDP (Chaos) ransomware encrypts data and demands ransoms for its decryption. After we launched this malware on our test machine, it locked fi
Secdojo is ransomware, a type of malware that encrypts files. It also renames files (by appending the ".secdojo" extension). For instance, it changes "1.jpg" to "1.jpg.secdojo" and "2.png" to "2.png.secdojo". Additionally, Secdojo creates the "index.html" file containing a ransom note. Screens
Tyson is ransomware (based on Chaos ransomware) that we discovered during an analysis of malware samples submitted to VirusTotal. Once infiltrated, Tyson encrypts files, appends its extension (".tyson") to filenames, and drops a ransom note ("DECRYPTION INSTRUCTIONS.txt"). For instance, it renames
Our examination of etyrthonrong[.]info has shown that the site employs a deceptive tactic (known as clickbait) to lure visitors into granting it permission to send notifications to their devices. Usually, when a site like etyrthonrong[.]info has permission to show notifications, it bombards users
ProSearch is a browser hijacker discovered during a routine investigative session. When inspecting a Torrenting website that uses rogue advertising networks, our researchers were redirected to a scam page using adult-oriented and video game themed lures. The webpage promoted a malicious installer
After inspecting the "EFT Payment Overview" email, we determined that it is spam. It is presented as a notification concerning a payment. This spam message aims to deceive recipients into providing their email account log-in credentials to a phishing file. The spam email with the subject "
We have reviewed this email and determined it to be a scam disguised as a notice regarding funds that can be released to the recipient. Typically, the goal of scammers behind such schemes is to obtain personal information or extract money from unsuspecting recipients. Emails of this type should be
Our researchers discovered the gamadd[.]com rogue page while browsing suspicious sites. Upon inspection, we determined that gamadd[.]com promotes spam browser notifications and redirects users to different (likely unreliable/dangerous) websites. Most visitors to webpages like gamadd[.]com enter t