Step-by-Step Malware Removal Instructions

Fake Google Sheets Extension
Browser Hijacker

Fake Google Sheets Extension

Our research team discovered this fake Google Sheets browser extension while inspecting deceptive sites. This piece of rogue software is disguised as a spreadsheet app that is part of the web-based Google Docs Editors suite. It must be emphasized that this extension is not associated with Google S

Riot Games & Twitch Giveaway Scam
Phishing/Scam

Riot Games & Twitch Giveaway Scam

After reviewing the site promoting the "Riot Games & Twitch Giveaway", we concluded that it is a scam exploiting the names of legitimate companies (Riot Games and Twitch) as a lure to trick individuals into divulging personal information. Neither Riot Games nor Twitch has anything to do with t

Psoriasis Adware (Mac)
Mac Virus

Psoriasis Adware (Mac)

During our analysis of Psoriasis, we learned that this app functions as adware. Upon installation, Psoriasis displays various advertisements. Moreover, it may collect data from devices. We also found that Psoriasis is part of the Pirrit family. Users should avoid installing apps like Psoriasis.

Treasures For Safekeeping Email Scam
Phishing/Scam

Treasures For Safekeeping Email Scam

After reading the "Treasures For Safekeeping" email, we determined that it is spam. This fake letter is supposedly from a Ukrainian citizen forced to flee from their home due to the Russian invasion of Ukraine. The sender requests help dealing with their familial treasure, part of which the email

Bc20 Adware (Mac)
Mac Virus

Bc20 Adware (Mac)

After examining the Bc20 application, we determined that it belongs to the Pirrit adware family. Upon installation, Bc20 delivers intrusive advertisements. Additionally, it may quietly collect various types of data. Thus, affected users should uninstall Bc20 from their computers and avoid instal

App_updater Adware (Mac)
Mac Virus

App_updater Adware (Mac)

We have inspected the App_updater application and found that it is an advertising-supported program from the Pirrit family. Once installed, App_updater delivers annoying and often misleading advertisements to users. Also, it may silently gather various data. Affected users should uninstall App_u

Error In Your IMAP/POP3 Mails Server Scam
Phishing/Scam

Error In Your IMAP/POP3 Mails Server Scam

Our analysis of the email revealed that it is a phishing email. Scammers behind this phishing campaign aim to deceive recipients into believing that they have received a notification from an email service provider. Their ultimate goal is to extract personal information from unsuspecting recipients

Qeza Ransomware
Ransomware

Qeza Ransomware

Qeza is a ransomware variant from the Djvu family that we discovered during an analysis of samples submitted to VirusTotal. Ransomware is a type of malware that encrypts files and demands payment for their decryption. In addition to encrypting files, Qeza appends its extension (".qeza") to filenam

Hyperliquid ($HYPE) Airdrop Scam
Phishing/Scam

Hyperliquid ($HYPE) Airdrop Scam

During our examination of the claim-hyperliquid[.]xyz site, we found that this page promotes a cryptocurrency airdrop. However, further analysis revealed that claim-hyperliquid[.]xyz is a fake page masquerading as a legitimate cryptocurrency trading platform (hyperliquid[.]xyz). This deceptive sit

Fake Valorant Gift Scam
Phishing/Scam

Fake Valorant Gift Scam

After examining a website offering gifts for the Valorant video game, we determined that it is fake. The scam states that users can claim one thousand Radianite points for free. This fake giveaway operates as a phishing scam and targets Valorant account log-in credentials. It must be stressed tha