While examining malware samples submitted to VirusTotal, we discovered a ransomware variant known as Boost. This variant is part of the Dharma ransomware family. Once executed, it encrypts files, modifies filenames, and provides two ransom notes (one in a pop-up window and another in the "FILES EN
Our researchers discovered Wintz ransomware while investigating new file submissions to the VirusTotal platform. This malicious program is based on the Chaos ransomware. Malware within this category encrypts data and demands ransoms for its decryption. On our testing system, it locked files and a
While investigating file submissions to the VirusTotal site, our researchers discovered a malicious program called Nett. It belongs to the MedusaLocker ransomware family. After we ran a sample of Nett ransomware on our test machine, it encrypted files and added a ".nett" extension to their titles
While investigating suspect websites, our researchers discovered the buycetsblog[.]com rogue page. After examining it, we learned that it promotes browser notification spam and redirects users to different (likely unreliable or harmful) sites. Visitors to buycetsblog[.]com and similar webpages pr
Vamtoacm[.]com is the address of a rogue page that we discovered while browsing rogue websites. Upon inspection, we determined that this webpage promotes spam browser notifications and generates redirects to other (likely dubious/malicious) sites. Most visitors to vamtoacm[.]com and pages akin to
Upon assessing news-yepiwu[.]cc, we concluded that it is an unreliable web page created to trick visitors into granting it permission to deliver notifications. We found that news-yepiwu[.]cc uses a clickbait technique to achieve it. Moreover, news-yepiwu[.]cc can redirect users to similar websites
Our research team found Zonix while investigating new submissions to the VirusTotal platform. Zonix belongs to the Xorist ransomware family. This malware encrypts data and demands ransoms for its decryption. After we executed a sample of Zonix ransomware on our testing system, it encrypted files
Our inspection of the GuardGo application revealed that it possesses features typical of browser hijackers. We observed that GuardGo is designed to promote boyu.com.tr by changing the settings of a web browser. It is recommended to avoid using apps like GuardGo and trusting sites promoted through
Our researchers discovered sassonbanaibudgetrental[.]com while investigating suspicious websites. This rogue page is designed to deceive visitors into allowing it to deliver browser notifications. Additionally, it can redirect users to different (likely unreliable/hazardous) sites. Most visitors
During our examination of news-kezewe[.]cc, we noticed that this page uses a clickbait technique to trick visitors into allowing it to send notifications. Once allowed, news-kezewe[.]cc can deliver a variety of misleading notifications designed to open shady web pages. Thus, users should avoid per