Our researchers discovered xdefender[.]site while investigating dubious websites. Upon examination, we learned that this rogue page endorses browser notification spam and generates redirects to different (likely unreliable/harmful) sites. Visitors to xdefender[.]site and similar webpages primaril
We have inspected WebProcesser and determined that it is an unwanted application with adware qualities. It is designed to display intrusive advertisements that can promote various scams and other shady web pages. Thus, users should avoid installing WebProcesser and remove it if it is already pre
While browsing suspicious websites, our research team discovered the premiumnetwork.co[.]in rogue page. It operates by promoting browser notifications spam and redirecting visitors to other (likely untrustworthy/hazardous) sites. Most users access premiumnetwork.co[.]in and analogous websites via
During our inspection, we found that proninemons[.]com uses a misleading method to lure visitors into granting it permission to display notifications. Once this permission is given, proninemons[.]com sends fake notifications to deceive users into clicking them. Thus, proninemons[.]com should not b
We have inspected Anubi (Anubis) and found that it is ransomware identical to Louis, Innok, and BlackPanther. It encrypts files and appends the ".Anubi" extension to them. Also, it changes the desktop wallpaper and provides a ransom note ("Anubi_Help.txt"). Additionally, Anubi displays a note on t
We have inspected sldefender[.]pro and discovered that it uses clickbait to trick visitors into agreeing to receive notifications. If permission is granted, sldefender[.]pro sends deceptive notifications that can lead to untrustworthy and potentially malicious websites. Overall, sldefender[.]pro s
SuperBlack is a malicious program likely built on LockBit 3.0 ransomware. SuperBlack is a ransomware-type program that encrypts data and demands payment for the decryption. On our testing system, it encrypted files and appended their filenames with an extension comprising a random character strin
While browsing file submissions to the VirusTotal platform, our researchers found the DiscoveryUniverse application. After investigating it, we determined that this app is advertising-supported software (adware). DiscoveryUniverse belongs to the AdLoad malware family. Adware is designed
While investigating suspicious websites, our researchers discovered the Clarity Tab browser hijacker. This extension promises to provide new tab widgets (e.g., clock, weather, bookmarks, etc.) and browser wallpapers. However, it changes browser settings to promote (via redirects) a search engine.
While browsing suspicious websites, our research team discovered the "Error_Code: GUI45WGV0001" scam. Upon examination, we determined that it is a technical support scam. It warns users that their computers are infected and urges them to call support. It must be stressed that these claims are fal