While browsing suspect websites, our research team found the lerophogainsub[.]com rogue page. Our examination revealed that this webpage endorses browser notification spam and redirects users to other (likely unreliable or harmful) sites. Most visitors to lerophogainsub[.]com and pages akin to it
Our team has tested cratebox.net and found that it is a dubious address designed to redirect users to various search engines. Sites like cratebox.net are commonly known as fake search engines. They are supposed to provide search results but do not deliver any. Also, sites like cratebox.net tend to
Kematian is a stealer-type malware. It is a PowerShell-based malicious program. Kematian is designed to steal vulnerable information, including extensive system data, various log-in credentials (usernames/passwords), cryptocurrency wallets, and so on. The stealer's developers are promoting it onli
After examining this "Uniswap Allocation", we determined that it is fake. The scam imitates the Uniswap platform but bears absolutely no association with it. This scheme utilizes an airdrop as a lure, and users tricked by it expose their digital wallets to a cryptocurrency drainer. Hence, victims
During our examination of Academization.app, we found that it is designed to inundate users with intrusive advertisements. Consequently, we have classified Academization.app as adware. Furthermore, it belongs to the Pirrit family. Overall, users should avoid installing Academization.app and remo
DomainNameEdit is a rogue app discovered by our researchers during a routine investigation of new file submissions to the VirusTotal platform. After examining this application, we learned that it is adware from the AdLoad malware family. Advertising-supported software is designed to generate rev
While investigating new file submissions to VirusTotal, our researchers found the TaskSite adware. This application belongs to the AdLoad malware family. Its purpose is to run intrusive advertisement campaigns. However, adware can possess other harmful capabilities aside from displaying ads.
COBRA is a ransomware-type program discovered by our research team during a routine investigation of new submissions to the VirusTotal website. This malicious program is based on Chaos. Ransomware is designed to encrypt data and demand ransoms for the decryption. On our test system, COBRA encrypt
We have analyzed this email and determined that it falls under the category of lottery scams. The intent of this email is to trick recipients into believing they have won a large sum of money and providing personal information. It is also likely that scammers behind this fraudulent email aim to ex
Our research team discovered SaveScheduler while browsing new file submissions to the VirusTotal platform. Upon examination, we determined that this app is advertising-supported software (adware). SaveScheduler is a part of the AdLoad malware family. Adware is designed to generate revenu