In the process of analyzing malware samples submitted to the VirusTotal platform, we came across the Wztt ransomware. This malicious software encrypts various files and adds the ".wztt" extension to their filenames. Additionally, the ransomware generates a ransom note named "_readme.txt". An exam
Upon reviewing this email, our team has determined that it is crafted by scammers with the intention of obtaining personal information from recipients who might not be aware of their motives. They pose as an email service provider and insert a link to a phishing page to deceive users into revealin
We discovered the Live Weather Report browser extension while investigating untrustworthy websites. This piece of software promises easy access to weather-related information. After analyzing this extension, we determined that it is adware. Adware stands for advertising-supported software.
Mcafchecking[.]click is the URL of a rogue webpage designed to promote online scams and spam browser notifications. Additionally, it can redirect visitors elsewhere (likely untrustworthy/dangerous sites). Most users access mcafchecking[.]click and pages akin to it via redirects generated by websi
Our researchers found the NativeSeason app during a routine inspection of new file submissions to VirusTotal. This application operates as advertising-supported software (adware). NativeSeason is also part of the AdLoad malware family. Adware is designed to generate revenue for its devel
Our research team discovered the AwesomeNewTab browser extension while investigating deceptive websites. This extension is promoted as a tool that allows easy access to specific sites. After examining AwesomeNewTab we determined that it is a browser hijacker. It modifies browser settings to gener
ClearIndexer is an adware-type app that we discovered during a routine investigation of new submissions to the VirusTotal website. Our examination revealed that ClearIndexer is adware and part of the AdLoad malware family. This application operates by running intrusive advertisement campaigns.
Our researchers discovered the Brick PDF browser extension during a routine investigation of dubious websites. This piece of software is promoted as a tool capable of merging PDF format files. After inspecting this extension, we learned that it is a browser hijacker. Brick PDF makes changes to br
While investigating deceptive websites, our researchers found the Skip Those Ads browser extension. It promises to block and skip advertisements. However, instead of operating as an adblocker – this extension works as advertising-supported software (adware). Skip Those Ads feeds users with unwante
Clip Banker is a specific kind of malware developed using the Go programming language. Its primary purpose is to unlawfully acquire cryptocurrency, particularly by taking advantage of a Telegram bot. This type of malware is crafted to operate stealthily, often infiltrating users' systems without t