XploitSPY is an Android-specific malware. This program is based on the L3MON RAT (Remote Access Trojan). XploitSPY has extensive data-stealing functionalities and has been observed infiltrating devices bundled with various legitimate-looking applications. This malware has been around since at lea
Qtr Search is a rogue extension classed as a browser hijacker. This piece of software hijacks browsers by making changes to their settings. The aim is to promote (through redirects) the qtrsearch.com fake search engine. Browser hijackers assign promoted sites as browsers' default search en
Through our analysis of moderton[.]com, we determined that it is an unreliable web page that uses a clickbait technique to trick visitors into permitting it to show notifications. We also discovered that moderton[.]com can redirect to other dubious websites. Thus, users should avoid visiting moder
After we inspected this "$BCKR PRE-SALE" event, it became evident that it is a crypto drainer scam. This scheme is presented as a presale event for a cryptocurrency. Yet, when users try to participate – they are deceived into exposing their digital wallets to a mechanism that drains them of funds.
After examining the site (dappradar-airdrops[.]io), we determined that it impersonates the legitimate DappRadar website (dappradar[.]com). Our assessment confirms that it is a scam website crafted to deceive visitors into participating in a fraudulent cryptocurrency giveaway. The primary objective
After examining "Restore Email DNS", we determined that it is spam. This letter informs that unusual errors have occurred on the recipient's email account, which have interrupted standard service. To fix these bogus issues, the recipient is led to a phishing site that targets email log-in credenti
In our analysis of the website presale.basingonbase[.]org, which promotes the presale of $BASING digital assets (cryptocurrency), we uncovered fraudulent activity. This scam operates by deceiving individuals into thinking they can acquire $BASING at a discounted rate, with the ultimate goal of cry
Upon examining methress[.]com, we discovered it to be among the numerous deceptive websites employing clickbait tactics to deceive visitors into allowing notifications. Furthermore, methress[.]com has the potential to redirect visitors to other dubious sites. Hence, it is recommended that users st
Upon scrutiny, we found that IndexerUpgrade is a deceitful application designed to flood users with bothersome and potentially deceptive advertisements, thus categorizing it as adware. Users frequently unknowingly download and install such software. It is advisable to promptly uninstall any dete
After analyzing malware samples submitted to VirusTotal, we identified HWABAG as a ransomware variant associated with the Dharma family. HWABAG is designed to encrypt files, rename them, and present two ransom notes, one through a pop-up window and the other by creating a "HWABAG.txt" file. HWABA