Tunnelbuilder[.]top is a deceptive website designed to trick visitors into subscribing to its notifications. Also, tunnelbuilder[.]top redirects users to similar pages. Users rarely intentionally open such pages. Our team encountered tunnelbuilder[.]top while investigating websites that use dishon
Atlas is the name of a clipper-type malware. Malicious programs categorized as such are designed to replace content copied into the clipboard. Atlas detects whenever a victim copies a cryptocurrency wallet address and replaces it – thus rerouting outgoing transactions. Atlas is capable of
Our researchers discovered the gadscare.com rogue page while investigating suspect sites. This webpage is designed to promote browser notification spam and redirect visitors elsewhere (likely unreliable/harmful sites). Users primarily enter such pages via redirects generated by websites using rogu
Based on our investigation, it has been confirmed that this email has been falsified by individuals intending to engage in malicious activities. The main goal of these scammers is to trick recipients into sharing confidential information via a fraudulent page. Such pages are referred to as phishin
Tnwkgbvl is ransomware that our team discovered while examining malware samples submitted to VirusTotal. We found that Tnwkgbvl belongs to the Snatch ransomware family. The purpose of Tnwkgbvl is to make files inaccessible by encrypting them. Also, Tnwkgbvl creates a ransom note ("HOW TO RESTORE Y
Targeting macOS users, ShadowVault is an information-stealing malware. Its creators market and sell it on a hacker forum at a price of $500 per month. This malicious software is capable of extracting sensitive data from web browsers, files stored on compromised computers, as well as data from cr
DefaultOptimization is an adware-type application belonging to the AdLoad malware family, which our research team discovered while investigating new submissions to the VirusTotal site. This app is designed to display advertisements that primarily promote deceptive/malicious content. Adwa
Our researchers discovered the Anti-us ransomware during a routine inspection of new submissions to VirusTotal. This malware is designed to encrypt data and demand payment for its decryption. After we executed a sample of Anti-us on our testing system, it encrypted files and appended their filena
While investigating suspicious websites, our researchers came upon the "Win Mac Book M2" scam. It claims that the visitor can win a prize by providing their data to the sponsored site. At the time of research, this scheme promoted a phishing webpage that targets email addresses. The scam c
After examining the "Your E-mail Will Be Closed" spam letter, we determined that it is malspam. This fake message claims that the recipient's email account will be terminated unless it is updated. The goal is to lure the recipient into opening the malicious attachment, which is designed to infect