Hokarsoud[.]com is a rogue webpage designed to push browser notification spam and lead users to other (likely unreliable/dangerous) sites. Most visitors to hokarsoud[.]com and pages akin to it access them through redirects generated by websites that utilize rogue advertising networks. Our researc
Web Ace Tab is a rogue browser extension that our research team found during a routine inspection of unreliable websites. While this piece of software promises to display abstract browser wallpapers, it also modifies certain settings to promote (via redirects) the webacetab.com fake search engine.
Our examination of the "Security Information" email revealed that it is spam promoting a phishing scam. This mail falsely claims that the recipient's email account password is about to expire, thus tricking them into disclosing this sensitive information. The spam email with the subject "S
The "You Have Received Attached Document" spam email is disguised as a notification regarding a sent file. The alleged attachment is a document concerning a contract. This phishing mail aims to obtain recipients' email account log-in credentials. The spam email with the subject "CONTRACT A
Mad Cat is a ransomware-type program discovered by our researchers during a routine inspection of new submissions to the VirusTotal platform. Malware within this classification operates by encrypting files to demand payment for its decryption. On our test machine, Mad Cat encrypted files and alte
It is common for scams promoted through spam campaigns to take advantage of ongoing crises, and this "PCRF" email is no exception. This mail's backdrop is the 2023 Israel–Hamas war, and the email is presented as a donation request from Palestine Children's Relief Fund (PCRF). It must be stressed
Art Tab Club is a rogue extension that promises to display artistic or art-depicting browser wallpaper. However, this piece of software is actually a browser hijacker. It changes browser settings to endorse (through redirects) the arttabclub.com fake search engine. It must be mentioned that this b
After analyzing the "HSBC - Payment Swift Copy" email, we determined that it is spam. Presented as a notification from HSBC regarding a payment, this letter aims to deceive recipients into providing their email account log-in credentials (passwords) to a phishing website. The scam email wi
ChrysanthemumLeucanthemum is the name of a malicious browser extension that our research team discovered while inspecting suspicious sites. This extension's functionalities include manipulation of browsers' applications, extensions, themes, etc. It also collects vulnerable information from browser
BlazeStealer is a malicious program that steals sensitive data from devices. Typically, malware of this kind targets browsing and finance related information. This stealer is offered for sale on the Web; at the time of writing, it is sold for under 16 USD. According to BlazeStealer's promo