During our analysis of malware samples submitted to VirusTotal, we encountered Bhtw, a ransomware variant belonging to the Djvu family. Bhtw encrypts files and appends the ".bhtw" extension to their names. Additionally, it generates a ransom note, a text file named "_readme.txt". An example of ho
During our investigation into suspicious advertising networks, our team encountered vexvideo[.]cam, an untrustworthy website that employs clickbait to deceive visitors into subscribing to its notifications. It should be noted that most users come across these pages unintentionally. Vexvide
Based on our analysis, audience-info[.]xyz is an untrustworthy website that employs a deceptive tactic to manipulate visitors into subscribing to its notifications. Users typically encounter sites like audience-info[.]xyz unintentionally, and our team came across it during the investigation of oth
InterfaceHelper is a rogue application that we discovered while inspecting new submissions to VirusTotal. After analyzing this app, we determined that it is adware belonging to the AdLoad malware family. InterfaceHelper displays ads on various interfaces and may have additional harmful functiona
Our researchers found the SkilledModuleSearch app while investigating new submissions to the VirusTotal site. It is a piece of advertising-supported software (adware). Additionally, SkilledModuleSearch is part of the AdLoad malware family. Adware is designed to run intrusive advertisemen
Trendysearches.com is the address of a fake search engine that provides inaccurate and potentially harmful search results. Websites of this kind are usually promoted (via redirects) by browser hijackers. Illegitimate search engines and the software endorsing them usually collect vulnerable user da
RustyStealer is a piece of malicious software classed as a stealer. Malware within this class is designed to steal data. These malicious programs extract and exfiltrate information, and RustyStealer is not an exception. Following successful infiltration, stealer-type malware begins its ope
Upon investigation of steerdibsurvey[.]space, we have determined that it is an untrustworthy website engaged in survey scams. Additionally, steerdibsurvey[.]space attempts to obtain permission to display notifications and redirects users to other websites. It is important to note that users do not
During a routine investigation of new submissions to VirusTotal, our research team found the UpgradeControl application. After examining this piece of software, we determined that it is adware belonging to the AdLoad malware family. UpgradeControl operates by delivering intrusive advertisement c
Our researchers discovered a rogue installer containing Volume Extra while investigating untrustworthy websites. This browser extension is endorsed as an advanced audio volume adjustment tool. After investigating Volume Extra, we determined that it is a browser hijacker. This extension makes alte