Step-by-Step Malware Removal Instructions

Stacks sBTC Rewards Program Scam
Phishing/Scam

Stacks sBTC Rewards Program Scam

Our inspection has shown that this website (buttholewinn.pages[.]dev) imitates the original Stacks platform, stacks.co. It is designed to deceive visitors into believing that they can receive rewards by following the provided steps. However, there are no rewards, and falling for this scam can resu

Anetchitic.com Ads
Notification Spam

Anetchitic.com Ads

Anetchitic[.]com is a rogue webpage discovered by our research team while investigating suspicious websites. It operates by promoting browser notification spam and redirecting visitors to different (likely unreliable/malicious) sites. Pages like anetchitic[.]com are most commonly accessed through

Solana Seeker ($SKR) Airdrop Scam
Phishing/Scam

Solana Seeker ($SKR) Airdrop Scam

While browsing questionable websites, our researchers found this fake "Solana Seeker ($SKR)" airdrop. It is presented as a giveaway of the Solana Seeker (SKR) tokens. It must be stressed that this airdrop is not associated with Solana or any other existing projects, platforms, or entities. The goa

DisclaimerCoin ($DONT) Airdrop Scam
Phishing/Scam

DisclaimerCoin ($DONT) Airdrop Scam

We have analysed the website (dont.coincap[.]click) and concluded that it is a fraudulent site designed to trick visitors into believing that they can receive free cryptocurrency. Also, the page mimics the original DisclaimerCoin platform (disclaimercoin.com) to appear legitimate. Its purpose is t

Fulatilly.com Ads
Notification Spam

Fulatilly.com Ads

Our analysis has revealed that fulatilly[.]com uses clickbait to obtain permission to show notifications. If users agree to get those notifications, they can be lured into deceptive websites through fake offers, warnings, and similar messages delivered by fulatilly[.]com. This website should not b

Iron Lock Ransomware
Ransomware

Iron Lock Ransomware

Our team has discovered Iron Lock while inspecting samples uploaded to VirusTotal. Our analysis shows that Iron Lock is ransomware based on Chaos. Once executed, it encrypts data, appends four random characters to filenames (adds its extension), and creates a ransom note ("READ ME.txt"). An examp

Privacyguardiansearch.com Redirect
Browser Hijacker

Privacyguardiansearch.com Redirect

We have tested privacyguardiansearch.com and found it to be a fake search engine promoted via an extension called Privacy Guardian by Secure Shell, a browser hijacker. Fake search engines (and browser hijackers) can cause privacy issues (and potentially other problems). Thus, users should avoid us

Secureshieldsearch.com Redirect
Browser Hijacker

Secureshieldsearch.com Redirect

Secureshieldsearch.com is a fake search engine that cannot generate search results and redirects to legitimate Internet search sites. We observed this webpage being promoted by “Secure Shield by Secure Shell”. However, other browser hijackers could endorse secureshieldsearch.com. Keep in mind that

Safedomains.net Redirect
Browser Hijacker

Safedomains.net Redirect

Our research team discovered the safedomains.net fake search engine while examining the Safe Domains by Secure Shell browser hijacker. This extension is presented as a tool that checks domain information before proceeding with a search. However, safedomains.net could be promoted by other software

DocuSign - Industrial Estate Project Email Virus
Phishing/Scam

DocuSign - Industrial Estate Project Email Virus

After inspecting this "DocuSign - Industrial Estate Project" email, we determined that it is fake. This spam message informs the recipient that they must sign the shared document within 48 hours to maintain compliance, funding, and project launch. This is a malspam campaign spreading malicious sof