Gatz is part of the Djvu ransomware family and operates by encrypting files and adding the ".gatz" extension to their names. In addition, the ransomware produces a "_readme.txt" file containing guidelines on how to pay the ransom. Our researchers encountered Gatz during an analysis of malware samp
After inspecting the "Domain Ownership Has Expired" email, we determined that it is spam operating as a phishing scam. The fake letter states that due to expired domain ownership, the recipient's email account will be deactivated. This spam email aims to deceive recipients into attempting to sign
Topdomainblog[.]com aims to deceive its visitors into subscribing to its notifications. Also, this page redirects visitors to other dubious websites. Our team stumbled upon topdomainblog[.]com during an investigation of web pages that use shady advertising networks. Users rarely visit sites like t
During our examination of pages that use shady advertising networks, we discovered gosteadyplaymate[.]store - a deceptive page designed to lure visitors into agreeing to receive notifications. Gosteadyplaymate[.]store displays deceptive content as a lure. Thus, gosteadyplaymate[.]store and similar
Our examination of the "MyGov Secure Message" email revealed that it is fake. This phishing letter is presented as a notification from myGov – a multi-purpose service provided by the Australian Government. myGov primarily deals with government-related (or adjacent) services by providing digital id
Upon reviewing this email, our team has determined that it is fraudulent and pertains to a fabricated purchase order confirmation. Additionally, there is a malicious file attached to the email. It is evident that this email is being utilized by cybercriminals to deceive the recipients into infecti
GoldenWolf42 is ransomware designed to encrypt files, add its extension (".GoldenWolf42") to filenames, change the desktop wallpaper, and create the "read_it.txt" file containing contact and payment information. GoldenWolf42 is based on Chaos ransomware. An example of how GoldenWolf42 renames fil
Our research team discovered the Abstract Art Tab browser extension while checking out rogue websites. This extension promises to display abstract art style browser wallpapers. After analyzing Abstract Art Tab, we determined that it is a browser hijacker. This piece of software makes alterations
Zipp3rs is a ransomware-type program that we discovered while inspecting new submissions to VirusTotal. This piece of malicious software belongs to the Xorist ransomware family. On our testing system, Zipp3rs encrypted files and appended their titles with a ".zipp3rs" extension. For example, an o
Our researchers discovered the CleanTab Refresh browser extension while inspecting dubious websites. It is promoted as an advanced one-click webpage refreshing tool. However, our investigation revealed that CleanTab Refresh operates as advertising-supported software (adware). Adware is des