Pings is malware we discovered during an analysis of malware samples submitted to VirusTotal. It was found that Pings is ransomware designed to encrypt files, provide a ransom note ("FILE RECOVERY.txt"), and rename files (append the ".pings" extension to filenames). Pings is used to extort money f
Mango ransomware is a malicious program discovered by our researchers during a routine inspection of new submissions to the VirusTotal platform. This malware is part of the Phobos ransomware family. Mango operates by encrypting files to demand payment for its decryption. After we launched a sampl
Evil Ant is malware classified as ransomware. The purpose of Evil Ant is to prevent victims from accessing their files by encrypting them. Also, Evil Ant changes the desktop wallpaper and displays a ransom note (a pop-up window) containing contact and payment information. Screenshot of files e
In the process of our thorough assessment, it has surfaced that ElementDisplay displays intrusive advertisements. Apps designed to bombard users with ads fall into the category of adware. Usually, apps like ElementDisplay are promoted and distributed using questionable methods to trick users int
After a thorough examination, it has been determined that ChrysochlorisAsiatica is an untrustworthy browser extension distributed through a malicious installer. Upon adding this extension to a browser, it activates the "Managed by your organization" feature, particularly in Chrome or Edge. Additio
Upon thorough examination, it has been determined that this email exemplifies a classic investment scam, often recognized as an advance-fee scam. The intention is to deceive recipients into sending money to fraudsters. Additionally, it is typical for scammers associated with these emails to solici
After a recent analysis of malware samples uploaded to VirusTotal, it has been determined that Cdtt belongs to the Djvu ransomware family. Its primary objective is to encrypt data, and it generates a ransom note ("_readme.txt") while appending the ".cdtt" extension to filenames (e.g., it renames "
During our comprehensive analysis of malware samples submitted to the VirusTotal page, it has been identified that Cdpo is a ransomware variant associated with the Djvu family. Cdpo encrypts files and adds its extension (".cdpo") to the filenames. For example, it renames "1.jpg" to "1.jpg.cdpo", "
Our research team discovered a deceptive website pushing a suspicious installation setup during a routine investigation of untrustworthy sites. Therein, we found the CallorhinusUrsinus malicious extension. This piece of software targets Google Chrome and Microsoft Edge browsers. The extension has
Upon reviewing the "SLEEPLESS AI Airdrop", we determined that it is a fake airdrop. This giveaway promises to distribute Sleepless AI (AI) cryptocurrency for free. Instead, this scheme operates as a cryptocurrency drainer – meaning that the scammers steal the funds stored in connected wallets. It