Museum Views Tab is a rogue browser extension that our research team discovered while inspecting suspicious websites. After analyzing this extension, we determined that it is a browser hijacker. Museum Views Tab makes alterations to browser settings in order to promote the museumviewstab.com illeg
While investigating suspicious sites, our research team found theowletnow[.]com rogue webpage. It operates by pushing browser notification spam and redirecting users to other (likely unreliable/hazardous) websites. Most visitors to theowletnow[.]com and sites akin to it – access them via redirect
After examining the "Mailbox Restriction Notice" email, we determined that it is spam used to run a phishing scam. This letter makes false claims regarding the suspension of the recipient's email account due to a lack of storage space. The aim is to promote a phishing site targeting email account
Buhti is ransomware targeting both Windows and Linux systems. The Buhti ransomware payload, designed to target Windows computers, is a variant of the previously leaked LockBit 3.0 ransomware with minor modifications. In order to attack Linux systems, Buhti ransomware utilizes a modified version of
Kraken is a malware that empowers threat actors to illicitly acquire diverse sensitive information from different web browsers and applications. The creators of Kraken offer it for sale on a hacker forum, with pricing options of $29 for 30 days, $49 for 90 days, and $69 for 180 days. Cybercriminal
Koddams[.]xyz is a rogue page that we discovered during a routine inspection of untrustworthy websites. It attempts to deceive visitors into enabling its browser notification delivery. Additionally, this webpage can redirect users to different (likely dubious/malicious) sites. Most visitors to pa
EXISC is a ransomware-type program that we discovered while investigating new submissions to the VirusTotal site. It is designed to encrypt data and demand payment for its decryption. After we executed a sample of this ransomware on our testing system, it encrypted files and appended their titles
During our analysis of topsadrettin[.]com, we identified that the website exhibits a deceptive message and prompts visitors to grant permission to display notifications. Moreover, topsadrettin[.]com has the potential to redirect users to other dubious websites. We encountered topsadrettin[.]com wh
During our investigation of unasc.co[.]in, our team uncovered its use of deceptive content designed to deceive visitors into subscribing to push notifications. Additionally, unasc.co[.]in may lead to other shady websites. Our encounter with unasc.co[.]in occurred while examining various pages that
During our examination of tophome24[.]com, we observed its intention to display untrustworthy notifications. Tophome24[.]com employs a misleading message designed to entice visitors into granting permission to receive its notifications. Our discovery of tophome24[.]com occurred while investigating