While analyzing a sample submitted to VirusTotal, it was discovered that DysentryClub functions as ransomware. DysentryClub encrypts files, adds the ".XXX555" extension to their filenames, and changes the desktop wallpaper. For example, it transforms "1.jpg" into "1.jpg.XXX555" and "2.png" into "2
During our analysis, we discovered that headirtlseivi[.]org employs deceptive tactics to coax users into accepting its notifications. It utilizes a clickbait technique, displaying misleading content to entice users. Additionally, headirtlseivi[.]org has the potential to redirect users to other unt
Our research team found the DefaultView application while investigating new submissions to the VirusTotal site. Upon examination, it became evident that DefaultView is adware from the AdLoad malware family. This app runs intrusive advertisement campaigns and might possess other harmful capabilit
After inspecting "Email Is Due For Renewal", we determined that it is spam. This fake letter states that the recipient's mail has almost reached its storage limits and requires an upgrade. This spam campaign aims to deceive victims into entering their log-in credentials into a phishing website.
While investigating a Torrenting website that uses a rogue advertising network, we discovered a deceptive webpage promoting the SoundVolumeView application. It is a PUA (Potentially Unwanted Application), and as such, it likely possesses undesirable or even hazardous functionalities. Additionally
While investigating file submissions to the VirusTotal platform, our researchers discovered the DiscoveryAdmin application. After analyzing DiscoveryAdmin, we learned that it is adware from the AdLoad malware family. Advertising-supported software is designed to generate revenue for its develope
Our research team found the IndexerAdmin application during a routine inspection of new submissions to the VirusTotal website. After examining this app, we determined that it is adware. IndexerAdmin is part of the AdLoad malware family. Adware stands for advertising-supported software. I
Upon thorough examination, it has become evident that gouvevop[.]com is an unreliable website with deceptive content. Its primary function seems to be promoting other dubious pages through notifications and redirects. Users should steer clear of gouvevop[.]com and refrain from consenting to receiv
Upon analyzing hogarlainz.com, we ascertained that it functions as a fake search engine. Our discovery of hogarlainz.com occurred during the examination of a malicious installer. Commonly, fake search engines like hogarlainz.com are propagated through browser hijackers. However, the installer asso
Pegasus is a ransomware-type program discovered by our researchers during a routine investigation of new file submissions to the VirusTotal platform. The sample of Pegasus that we executed on our test machine, encrypted files and altered their titles. Original filenames were appended with an exte