During our assessment of the Reload malware, we found that it is ransomware (from the Makop family) designed to encrypt files. We discovered Reload during an examination of malware samples submitted to VirusTotal. In addition to encrypting data, Reload drops a ransom note ("+README-WARNING+.txt")
Our researchers discovered the Load Time browser extension while inspecting dubious websites. It is endorsed as a tool that allows users to identify and monitor website loading times. After analyzing Load Time, we determined that this extension is advertising-supported software (adware). A
Upon checking out the "Remittance Slip" email, we determined that it is spam. This mail aims to trick recipients into visiting a phishing website targeting email account log-in credentials through vague claims regarding a payment. The spam email with the subject "MT103" (may vary) states t
After reading the "Donation To Charity Home" email, we determined that it is spam. This letter is a philanthropy-themed scam. Specifically, it requests aid from the recipient in distributing millions to charitable causes, and they will be able to keep 30% of the funds for their assistance. This s
Weatherly is a rogue extension classed as a browser hijacker. This piece of software makes alterations to browser settings in order to generate redirects. Weatherly also collects sensitive browsing-related data. Typically, browser hijackers assign fake search engines as browsers' default,
WingsOfGod (also known as WogRAT) is a malware classed as a Remote Access Trojan (RAT). These trojans allow attackers to access and control devices remotely. RATs may enable user-level control over infected machines. WingsOfGod has a Windows and Linux variant. The malicious program has been aroun
Planet Stealer is a malicious software designed to extract sensitive information from compromised computers. It targets data from browsers, cryptocurrency wallets, Discord, and more. The creators of this malware offer it for sale at $75 per week or $200 per month. Planet stealer is a sophi
Our researchers found the Zarik Locker ransomware while reviewing file submissions to the VirusTotal site. Malware of this kind encrypts data and demands ransoms for its decryption. After we executed a sample of Zarik Locker on our testing system, it encrypted files and added a ".zarik5313" exten
During our examination of the myondsshop[.]com page, we discovered that it employs clickbait (a deceptive technique) to trick visitors into allowing it to send notifications. We also found that myondsshop[.]com has at least two designs and can redirect users to similar websites. Myondsshop
We have examined the email and discovered that it is a fraudulent email masquerading as a notification from an email service provider. The perpetrators of this scam aim to entice recipients into disclosing sensitive information on a counterfeit login page. Such emails are commonly referred to as p