Our research team discovered the MiniMe ransomware while inspecting new submissions to the VirusTotal website. This malicious program is based on the Chaos ransomware. After we executed a sample of MiniMe on our test machine, it encrypted files and appended their filenames with a ".minime" extens
Our analysis of the VirtualActivity application revealed that it exhibits intrusive advertisements. For this reason, we classified VirtualActivity as adware. It is worth noting that software of this type is commonly disseminated through dubious and deceptive techniques, which can lead to uninten
Ahtw is ransomware associated with the Djvu family. It encrypts files on the victim's computer and requests a ransom for the decryption tools. Our team encountered Ahtw during the analysis of recently submitted malware samples on the VirusTotal platform. It is worth mentioning that Ahtw may be dis
During our examination of malware samples submitted to VirusTotal, we came across Ahgr, a ransomware variant that is part of the Djvu family. Ahgr encrypts files and modifies their names by adding the ".ahgr" extension. Furthermore, it creates a ransom note as a text file named "_readme.txt". Her
During our analysis of malware samples submitted to VirusTotal, we came across Ahui, ransomware belonging to the Djvu family. Ahui blocks access to files by encrypting them and alters their filenames by appending a new extension (".ahui"). Furthermore, it generates a ransom note (a text file named
Our research team discovered the fastcheck[.]top rogue page during a routine investigation of questionable websites. It is designed to push spam browser notifications and generate redirects to other (likely dubious/malicious) sites. Users typically access webpages via redirects caused by websites
Dollarsurvey[.]top is a rogue webpage that we discovered while investigating untrustworthy sites. It is designed to endorse dubious content and browser notification spam. Additionally, this page can redirect users to different (likely unreliable/harmful) websites. Visitors to dollarsurvey[.]top a
While investigating websites utilizing questionable advertising networks, we encountered ronadforyousystems[.]com. This site employs a clickbait technique to trick visitors into permitting it to show notifications (ads). Moreover, this site may redirect visitors to other unreliable websites. There
Our researchers discovered the centrumbook[.]com rogue page during a routine investigation of suspicious websites. It operates by promoting browser notification spam and redirecting visitors to other (likely untrustworthy/dangerous) sites. Most users enter webpages like centrumbook[.]com through
During our investigation of the Wingman Clock browser extension, we discovered that it operates as a browser hijacker - it is designed to modify web browser settings. Our team encountered Wingman Clock on a suspicious website. It is unusual for users to download and install (or add) browser hijack