Zipp3rs is a ransomware-type program that we discovered while inspecting new submissions to VirusTotal. This piece of malicious software belongs to the Xorist ransomware family. On our testing system, Zipp3rs encrypted files and appended their titles with a ".zipp3rs" extension. For example, an o
Our researchers discovered the CleanTab Refresh browser extension while inspecting dubious websites. It is promoted as an advanced one-click webpage refreshing tool. However, our investigation revealed that CleanTab Refresh operates as advertising-supported software (adware). Adware is des
Interiorz is a browser extension promising easy access to home design related content. Our researchers discovered this piece of software while investigating untrustworthy websites. After inspecting Interiorz, we determined that it is a browser hijacker promoting (via redirects) the prosearchsoluti
Army Signal is a ransomware-type program that our research team discovered while inspecting new submissions to the VirusTotal website. After being executed on our testing system, Army Signal encrypted files and appended their files with a ".SIGSCH" extension. For example, a file originally titled
BrightNight is the name of a malicious program designed to encrypt data and demand payment for its decryption. Due to this behavior, the program is classified as ransomware. After we launched a sample of BrightNight on our testing system, it encrypted files and altered their filenames. Original t
Our team discovered the website captchasafe[.]top while investigating pages that use dubious advertising networks. Captchasafe[.]top is designed to trick users into subscribing to its notifications. Additionally, captchasafe[.]top may redirect visitors to similar pages. It is rare for users to int
During our examination of the Search New Tab browser extension, we discovered that it acts as a browser hijacker whose purpose is to promote a fake search engine called askaibrowser.com. Search New Tab hijacks the user's web browser by altering its settings. It is worth noting that users often dow
Upon investigating Smart-browsing, we discovered that the program exhibits bothersome advertisements that may direct users to untrustworthy websites. As a result, we have classified Smart-browsing as adware. Typically, users inadvertently download and install ad-supported software without realizin
While inspecting suspicious websites, our research team discovered the oWebster Search browser extension. It operates by making modifications to browser settings with the goal of generating redirects to the owebsearch.com fake search engine. Due to this behavior, oWebster Search is classified as a
Our research team found the Active Land browser extension while inspecting dubious websites. It is endorsed as an easy-access tool for sports-related content. After analyzing Active Land, we determined that it is a browser hijacker. This extension changes browser settings and promotes (through red