Our researchers discovered the "Top Two" browser extension while inspecting dubious sites. After examining this software, we learned that it is a browser hijacker. Top Two changes browser settings to endorse (via redirects) the toptosearch.com fake search engine. Typically, browser hijacke
Upon examining this "OneDrive - A Secured File Has Been Shared" email, we determined that it is fake. This spam letter attempts to deceive recipients into revealing their account log-in credentials by presenting them with a phishing website disguised as a OneDrive page. This spam email is
While analyzing a rogue installation setup, our researchers discovered the WeatherZero PUA (Potentially Unwanted Application). This app provides a desktop widget that displays local weather data. However, PUAs often possess harmful functionalities and tend to infiltrate systems in bundles. The in
While investigating suspect sites, our research team discovered this "CyberLama Mint" scam promoted on cyberlama-tyn.pages[.]dev (keep in mind that it could be hosted elsewhere). This scheme operates as a cryptocurrency drainer – it drains digital assets from exposed cryptowallets. It must be emp
During our examination of griboughafo[.]com, we discovered that it employs a deceptive tactic to deceive visitors into permitting it to send notifications. Users often unintentionally access web pages like griboughafo[.]com. If encountered, such sites should be closed. Griboughafo[.]com di
FlipPlayer seems to be a video player. However, our discovery of FlipPlayer occurred during the examination of web pages associated with rogue advertising networks. Thus, we classified FlipPlayer as an unwanted application. Users are advised not to install apps like FlipPlayer to avoid potential i
After reading the "Fraud Victim" email, we determined that it is spam. The letter claims that the recipient is entitled to receive an exorbitant sum from a fund created to compensate fraud victims and spread awareness about financial fraud. This phishing message is not associated with any legitim
Our team has tested the Loungoo extension and discovered that its functionality involves hijacking a web browser. The majority of browser hijackers we have inspected promote fake search engines, and Loungoo is no exception. To avoid potential risks, users should not add extensions like Loungoo to
While inspecting Adblock Castle - ad-free browser, we found that this extension functions as adware. When added, Adblock Castle - ad-free browser delivers intrusive advertisements that can take users to untrustworthy websites. Also, Adblock Castle - ad-free browser can gather various data. Users s
During our analysis of greengiraffe[.]top, we found that this is a deceptive web page that presents misleading messages. This site is created to trick visitors into granting it permission to send notifications. Users should avoid visiting greengiraffe[.]top and similar pages to avoid potential neg