During a routine inspection of new submissions to VirusTotal, our research team found and sampled the Flying Dutchman ransomware. This malicious program belongs to the Xorist ransomware family. After we executed Flying Dutchman's sample on our test machine, it encrypted files and changed their ti
We examined this email and learned that it is a fake congratulatory letter from a company named "Gold Fields Bullion Limited" (there is a real gold mining company called Gold Fields Limited). Scammers behind this email attempt to trick recipients into believing that they have won an award. They en
While inspecting the WiredBlank application, we learned that it shows advertisements. Apps that show ads are classified as adware (advertising-supported software. In most cases, adware is promoted and distributed using deceptive methods (e.g., scare tactics and fake installers). Our team discove
While inspecting new malware submissions to VirusTotal, our researchers came upon the Dkey ransomware-type program. It belongs to the Dharma ransomware family, and it is designed to encrypt data and demand payment for decryption. Once executed on our test system, Dkey began encrypting files and a
While inspecting new submissions to VirusTotal, our research team found a rogue application named NetSearchPanel. Following our analysis of this application, we determined that it operates as adware. It is pertinent to mention that NetSearchPanel is part of the AdLoad malware family. Adw
Nidescar[.]com is a rogue site designed to deceive visitors into enabling spam browser notification delivery. It is also capable of redirecting them to various (likely untrustworthy/malicious) websites. Users typically access such webpages through redirects caused by sites that use rogue advertis
Our research team discovered the Solo ransomware-type program during a routine investigation of new submissions to VirusTotal. This piece of malicious software is part of the VoidCrypt ransomware family. After we executed a sample of Solo (VoidCrypt) on our testing system, it encrypted files and
While inspecting dubious websites, our researchers found the newadsfit[.]com webpage. It operates by attempting to trick visitors into allowing spam browser notification delivery. Additionally, this site can redirect users to other (likely untrustworthy/dangerous) websites. Most visitors to pages
After examining topmusicalcomedy[.]com, our team found that it is one of the deceptive pages designed to lure visitors into agreeing to receive notifications from it. We also found that topmusicalcomedy[.]com can redirect visitors to other untrustworthy websites. We discovered this site while insp
While inspecting essential-scan[.]com, we learned that it runs the "McAfee - Your PC is infected with 5 viruses!" scam and wants to show notifications. It displays deceptive content (uses deceptive marketing) to trick visitors into purchasing legitimate antivirus software. Typically, users open su