NoEscape is ransomware offered as a service (Ransomware-as-a-Service) to other criminals who act as affiliates or customers. The interface of the ransomware builder empowers affiliates to customize multiple configurations when constructing the ransomware executables. However, the main purpose of N
During a routine investigation of questionable websites, our research team discovered the fyngood[.]com rogue webpage. It is designed to push browser notification spam and redirect users to different (likely dubious/malicious) sites. Pages like fyngood[.]com are most commonly accessed via redirec
Getarrectlive[.]com is a rogue page that our researchers discovered during a routine inspection of suspicious websites. It operates by promoting browser notification spam and redirecting visitors to different (likely unreliable/malicious) webpages. Most users enter pages like getarrectlive[.]com
While investigating suspicious websites, our research team found the device-defense[.]com rogue page. It promotes spam browser notifications and redirects visitors to other (likely untrustworthy/hazardous) sites. Users primarily enter webpages like device-defense[.]com through redirects generated
Bringmesedline[.]com is a rogue page designed to endorse browser notification spam and redirect visitors to different (likely unreliable/harmful) websites. Most visitors to such webpages access them through redirects caused by sites that employ rogue advertising networks. We discovered bringmesed
Our research team has recently identified a new member of the Djvu ransomware family called Neqp. Neqp is a malicious software, commonly known as ransomware, that encrypts files, making them inaccessible to victims. Our discovery of Neqp was made during the analysis of samples on the VirusTotal we
Our researchers discovered the etingplansfo[.]buzz rogue webpage during a routine inspection of untrustworthy sites. It is designed to endorse browser notification spam and redirect visitors to different (likely unreliable or malicious) websites. Users primarily enter pages like etingplansfo[.]bu
Datingmint[.]top is a rogue page that our research team discovered while inspecting suspicious sites. It operates by promoting browser notification spam and redirecting visitors to other (likely unreliable/dangerous) websites. Most users access webpages like datingmint[.]top via redirects generate
Thx is ransomware that falls under the Dharma family. Its main objective is to encrypt data. As part of the encryption process, Thx adds the victim's ID, cluster1@outlook.sa email address, and the ".thx" extension to the original filenames. For example, a file named "1.jpg" would be renamed to "1
Neon, a variant of the Djvu ransomware family, is ransomware that encrypts files on the victim's computer and demands a ransom payment in exchange for the decryption tools. Our team came across Neon during our examination of recently submitted malware samples on VirusTotal. It is important to be a