Our researchers discovered the Cosmic browser extension while inspecting untrustworthy websites. After investigating this extension, we determined that it is a browser hijacker. Cosmic makes alterations to browser settings in order to promote the search.cosmic-tab.com fake search engine. B
Our inspection of the "Max-Lotto" email revealed that it is a phishing scam. This spam letter states that the recipient has been selected as the "Max-Lotto" lottery winner. These false claims are used to trick users into disclosing their personally identifiable information. It must be stressed th
Authenticpcedge[.]com is a rogue page that our researchers discovered while investigating suspicious sites. It is designed to promote deceptive content and push browser notification spam. Authenticpcedge[.]com can also redirect visitors to other (likely unreliable/dangerous) webpages. Users typic
My Weather is a browser extension that promises easy access to weather forecasts. After inspecting this piece of software, we determined that it operates as a browser hijacker. My Weather modifies browser settings to promote (via redirects) the search.bestweatherextension.com fake search engine.
During our examination of pages that use rogue advertising networks, we came across linkforcaptcha[.]top. This website uses a clickbait technique to deceive visitors into consenting to receive notifications. Moreover, linkforcaptcha[.]top may redirect visitors to other untrustworthy sites. Therefo
While investigating new submissions to VirusTotal, our researchers discovered the @BLOCKED ransomware. This malicious program encrypts data and demands ransoms for its decryption. Once we launched a sample of this ransomware on our testing system, it began encrypting files and appended their titl
Evnilost[.]xyz is a misleading website promoting the "McAfee - Your PC is infected with 5 viruses!" scam to deceive visitors. It presents fake virus alerts to persuade users to purchase legitimate software. Moreover, the site asks for authorization to exhibit dubious notifications. Evnilos
PennyWise is the name of malware designed to steal sensitive information from infected computers. Once installed on a system, information stealer malware can collect a wide range of data, such as login credentials, credit card numbers, social security numbers, and other personal information.
Our research team found the kennu[.]click rogue page while investigating untrustworthy websites. It operates by promoting scams, pushing spam browser notifications, and redirecting visitors to different (likely unreliable/dangerous) sites. Most users enter webpages like kennu[.]click through redir
Totalprotection-2023[.]store is a rogue webpage that we discovered while inspecting suspicious sites. It is designed to promote scams and browser notification spam. Additionally, totalprotection-2023[.]store can redirect users to other (likely untrustworthy/harmful) websites. Visitors to rogue pa