Army Signal is a ransomware-type program that our research team discovered while inspecting new submissions to the VirusTotal website. After being executed on our testing system, Army Signal encrypted files and appended their files with a ".SIGSCH" extension. For example, a file originally titled
BrightNight is the name of a malicious program designed to encrypt data and demand payment for its decryption. Due to this behavior, the program is classified as ransomware. After we launched a sample of BrightNight on our testing system, it encrypted files and altered their filenames. Original t
Our team discovered the website captchasafe[.]top while investigating pages that use dubious advertising networks. Captchasafe[.]top is designed to trick users into subscribing to its notifications. Additionally, captchasafe[.]top may redirect visitors to similar pages. It is rare for users to int
During our examination of the Search New Tab browser extension, we discovered that it acts as a browser hijacker whose purpose is to promote a fake search engine called askaibrowser.com. Search New Tab hijacks the user's web browser by altering its settings. It is worth noting that users often dow
Upon investigating Smart-browsing, we discovered that the program exhibits bothersome advertisements that may direct users to untrustworthy websites. As a result, we have classified Smart-browsing as adware. Typically, users inadvertently download and install ad-supported software without realizin
While inspecting suspicious websites, our research team discovered the oWebster Search browser extension. It operates by making modifications to browser settings with the goal of generating redirects to the owebsearch.com fake search engine. Due to this behavior, oWebster Search is classified as a
Our research team found the Active Land browser extension while inspecting dubious websites. It is endorsed as an easy-access tool for sports-related content. After analyzing Active Land, we determined that it is a browser hijacker. This extension changes browser settings and promotes (through red
EssentialLoop is an adware-type application that we discovered while reviewing new submissions to the VirusTotal website. This app is part of the AdLoad malware family. EssentialLoop operates by running intrusive ad campaigns and collecting private data. Adware stands for advertising-sup
Our research team found the "TROJAN_2023 And Other Viruses Detected (5)" scam while investigating rogue websites. This scheme falsely claims that the visitor's device is infected with high-risk viruses. While it is disguised as McAfee, this scam is in no way associated with the actual computer sec
Upon conducting an analysis of LuckyWheel, our team determined that its primary function is to exhibit intrusive advertisements, leading us to label it as adware. It is important to mention that users often download and install adware without knowing its true nature or purpose. When instal