While checking malware samples submitted to VirusTotal, we discovered Triton RAT, a Remote Access Trojan allowing the attackers to perform various malicious activities on the infected device. In most cases, RATs are used to steal sensitive information and (or) deliver additional malicious payloads
Our inspection of iwogo[.]sbs has shown that it is a deceptive website that uses clickbait to trick visitors into accepting its notifications. If permitted, iwogo[.]sbs can deliver fake alerts and other misleading notifications to trick users into interacting with them. Users should not visit iwog
Our researchers discovered Maximsru ransomware while checking out new submissions to the VirusTotal website. This malware is designed to encrypt data and demand ransoms for its decryption. On our testing system, Maximsru encrypted files and added an extension comprising five random characters to
We have inspected fastdropdevice.co[.]in and learned that it uses clickbait (a deceptive method) to lure visitors into agreeing to receive its notifications. Once the site has this permission, it floods users with annoying and deceptive notifications promoting unreliable websites. Therefore, fastd
Our examination of adslessfunrtb[.]top has revealed that the page uses clickbait to obtain permission to deliver notifications. If this permission is granted, adslessfunrtb[.]top can bombard users with fake warnings and other deceptive messages. Therefore, adslessfunrtb[.]top should not be trusted
We have examined this email and found that it is a scam designed to trick recipients into providing their banking details and other personal information. None of the claims within this email are true. Whoever receives this email should ignore it to avoid monetary loss, identity theft, or other pot
SKUNK is a ransomware-type program. Malicious software within this classification is designed to encrypt data and demand payment for the decryption. On our test machine, SKUNK encrypted files and added a ".SKUNK" extension to their filenames. For example, a file titled "1.jpg" appeared as "1.jpg.
While browsing suspicious sites, our research team discovered the "AVG - Your Subscription Has Expired" scam. It claims that the website visitor's AVG subscription has expired, and their computer is at risk. This scam is not associated with the actual AVG AntiVirus. The goal of this deceptive page
888 is the name of a malicious program classed as ransomware. This malware operates by encrypting files and demanding payment for the decryption. On our testing system, the ransomware encrypted files and appended their names with a ".888" extension. For example, a file initially titled "1.jpg" as
Our research team discovered the CrazyHunter ransomware while reviewing new submissions to the VirusTotal website. This malicious program is designed to encrypt data and demand ransoms for the decryption. After we executed a sample of CrazyHunter on our testing system, it encrypted files and adde