The LPEClient malware is a known threat that came to light in 2020. This malicious software is designed with the primary purpose of gathering information from the victims it infects and then downloading additional malicious payloads from a remote server. These payloads are executed in the computer
SIGNBT, a malware strain employed by threat actors, is distinguished by its sophistication and persistence in targeted cyberattacks. This malware allows threat actors to infiltrate and retain control over compromised systems, utilizing a multifaceted attack approach and an extensive set of backdoo
We have examined the email and found that it is a fraudulent attempt designed to deceive recipients into revealing their sensitive information and (or) extorting money from them. The email contains elements of deception, such as false claims or requests, with the ultimate goal of exploiting unsusp
CATAKA is ransomware discovered while examining samples uploaded to the VirusTotal website. Once a computer is infected, CATAKA encrypts files and appends a random extension to filenames. Also, CATAKA changes the victim's desktop wallpaper and provides a ransom note ("Readme.txt"). An example of
While analyzing samples of malicious software on the VirusTotal page, we came across the Ppvs ransomware, which belongs to the Djvu family. This ransomware, once it infiltrates a computer, encrypts data and appends the ".ppvs" extension to filenames. For example, it renames "1.jpg" to "1.jpg.ppvs"
During our analysis of malware samples on the VirusTotal platform, we came across the Ppvt ransomware, which is part of the Djvu ransomware family. Once it infiltrates a computer, this ransomware encrypts data and appends the ".ppvt" extension to the filenames. For instance, it transforms "1.jpg"
During our analysis of malware samples uploaded to VirusTotal, we came across the Ppvw ransomware, which is affiliated with the Djvu malware family. When a computer is infected with Ppvw, it encrypts files and appends the ".ppvw" extension to their file names. For instance, "1.jpg" is transformed
Website Security Scanner is endorsed as a tool that scans visited websites and verifies their safety based on over fifty databases. Our researchers discovered this browser extension during a routine inspection of rogue sites. After examining this piece of software, we determined that it is adware
While investigating suspicious sites, our researchers discovered the Art New tabs browser extension. It modifies browser settings to endorse (via redirects) the goog.artnewtabs.com fake search engine. This extension also spies on users' browsing activity. This behavior classifies Art New tabs as a
While investigating new malware submissions to VirusTotal, our research team discovered the BlackDream ransomware-type program. Software within this classification encrypts data in order to demand payment for its decryption. On our test system, BlackDream encrypted files and modified their filenam