During a routine examination of malware samples submitted to VirusTotal, our research team encountered ransomware dubbed Top. This malicious software is intended to encrypt data and then demand payment for decrypting the files. Top ransomware provides two ransom notes: "info.hta" and "info.txt". I
While examining malware samples submitted to VirusTotal, our group came across Wzqw ransomware belonging to the Djvu family. When a computer is compromised, Wzqw encrypts various files and adds the ".wzqw" extension to their initial filenames. As an illustration, a file labeled "1.jpg" is transfor
In the process of analyzing malware samples submitted to the VirusTotal platform, we came across the Wztt ransomware. This malicious software encrypts various files and adds the ".wztt" extension to their filenames. Additionally, the ransomware generates a ransom note named "_readme.txt". An exam
Upon reviewing this email, our team has determined that it is crafted by scammers with the intention of obtaining personal information from recipients who might not be aware of their motives. They pose as an email service provider and insert a link to a phishing page to deceive users into revealin
We discovered the Live Weather Report browser extension while investigating untrustworthy websites. This piece of software promises easy access to weather-related information. After analyzing this extension, we determined that it is adware. Adware stands for advertising-supported software.
Mcafchecking[.]click is the URL of a rogue webpage designed to promote online scams and spam browser notifications. Additionally, it can redirect visitors elsewhere (likely untrustworthy/dangerous sites). Most users access mcafchecking[.]click and pages akin to it via redirects generated by websi
Our researchers found the NativeSeason app during a routine inspection of new file submissions to VirusTotal. This application operates as advertising-supported software (adware). NativeSeason is also part of the AdLoad malware family. Adware is designed to generate revenue for its devel
Our research team discovered the AwesomeNewTab browser extension while investigating deceptive websites. This extension is promoted as a tool that allows easy access to specific sites. After examining AwesomeNewTab we determined that it is a browser hijacker. It modifies browser settings to gener
ClearIndexer is an adware-type app that we discovered during a routine investigation of new submissions to the VirusTotal website. Our examination revealed that ClearIndexer is adware and part of the AdLoad malware family. This application operates by running intrusive advertisement campaigns.
Our researchers discovered the Brick PDF browser extension during a routine investigation of dubious websites. This piece of software is promoted as a tool capable of merging PDF format files. After inspecting this extension, we learned that it is a browser hijacker. Brick PDF makes changes to br