During our analysis of samples on VirusTotal, our team discovered a new variant of the Djvu ransomware family named Popn. This particular variant encrypts data and adds the ".popn" extension to the affected files. Also, the ransomware generates a ransom note called "_readme.txt". Popn utilizes a
X is ransomware that encrypts files, creates a ransom note ("X-Help.txt"), and renames files (appends the ".X" extension to filenames). Cybercriminals use this malware to extort money from victims. An example of how X modifies filenames: it renames "1.jpg" to "1.jpg.X", "2.png" to "2.png.X", and s
CherryBlos is the name of a malware targeting Android operating systems. This malicious program is classified as a stealer and a clipper. It operates by extracting/exfiltrating cryptowallet credentials and rerouting cryptocurrency transactions to wallets owned by the attackers. At least four fake
Upon reviewing CloudConnectors, our team concluded that its main purpose is to present intrusive advertisements to users, classifying it as adware. Notably, applications like CloudConnectors are often downloaded and installed without users' awareness. Thus, it is recommended not to trust such ap
While checking out new submissions to VirusTotal, our research team discovered the CreativeApply app. Our analysis of this piece of software revealed that it is adware. Additionally, we learned that CreativeApply is part of the AdLoad malware family. Adware stands for advertising-support
CorporateGlobe is an adware-type application discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. This app is part of the AdLoad malware family. It operates by running intrusive advertisement campaigns, i.e., CorporateGlobe's goal is to feed use
OuterSource is a rogue app that we discovered while investigating new submissions to the VirusTotal website. Our analysis of this application revealed that it is advertising-supported software (adware). OuterSource is part of the AdLoad malware family. Adware is designed to display adver
While analyzing malware samples submitted to VirusTotal, we encountered Poaz, a ransomware variant belonging to the Djvu family. Poaz employs file encryption to block access to files and alters their names by appending the ".poaz" extension. Additionally, it generates a ransom note, a text file na
Our researchers found the Kustom Tab - Your Live Tab browser extension during a routine inspection of dubious websites. After analyzing this piece of software, we learned that it is a browser hijacker. Kustom Tab - Your Live Tab makes alterations to browser settings in order to generate redirects.
In our examination of The Weather Tab, our team observed characteristics commonly linked to a browser hijacker. Typically, these applications hijack web browsers by altering their settings and often promote fake search engines. Users frequently unintentionally download and add such apps to their b