STAR VS THE FORCES OF EVIL is ransomware we discovered while checking the VirusTotal page for recently submitted malware samples. STAR VS THE FORCES OF EVIL encrypts files, appends the ".STARVSTHEFORCESOFEVIL" extension to filenames, and drops the "how_to_back_files.html" file (a ransom note). An
Our research team discovered the eLiteSort malicious program during a routine inspection of deceptive websites. The installer promoting this program also installed the Info adware on our test machine. Therefore, it is highly likely that if eLiteSort is detected on the system – other unwanted/harmf
While checking out rogue websites, our research team found an installation setup containing an adware-type application named Info. It is pertinent to mention that said installer was also bundled with the eLiteSort malware. Adware stands for advertising-supported software. It is designed to
Our team has concluded that nowcaptchahere[.]top is an unreliable website that shows a deceptive message to trick visitors into consenting to receive notifications. It is common for individuals to access websites like nowcaptchahere[.]top accidentally. We found nowcaptchahere[.]top while examining
During our examination of malware samples submitted to VirusTotal, we came across a variation of Djvu ransomware known as Coaq. This version encrypts files and adds the ".coaq" extension to their names. Moreover, Coaq also creates a ransom note file named "_readme.txt". Since Coaq is associated w
Our investigation of malware samples uploaded to VirusTotal has uncovered a new version of the Djvu ransomware dubbed Cosw. Its primary aim is to encrypt files on the infected computer and rename them with by appending the ".cosw" extension. Cosw also creates a file named "_readme.txt", which cont
While inspecting new submissions to VirusTotal, our researchers discovered Carver – a malicious program belonging to the Phobos ransomware family. Malware within this category is designed to encrypt data and demand ransoms for its decryption. After we executed a sample of Carver on our test machi
ImBetter is the name of an information-stealing malware. Stealers can extract a wide variety of sensitive information from systems and installed applications. ImBetter has been actively spread via malicious websites disguised as ones relating to cryptocurrency and those offering online file format
While investigating rogue websites, our research team discovered an installer bundled with the CD Collection malicious program. If CD Collection is detected on the system, it is highly likely that adware and/or other unwanted/malicious content has infiltrated it as well. Following installa
Our inspection of the "Messages Not Delivered Due To Server Interruptions" email revealed that it is spam. This phishing letter aims to trick recipients into disclosing their email account credentials by making false claims regarding undelivered messages. The spam email with the subject "M