Our researchers discovered the lax-search.com fake search engine while inspecting browser hijackers. This software typically promotes (via redirects) websites like lax-search.com. These search engines are rarely capable of providing search results, and while lax-search.com can generate them – the
During our investigation of pages utilizing rogue advertising networks, we came across agabreloomr[.]com. This site employs a clickbait tactic to deceive visitors into consenting to receive push notifications, and it also directs users to other websites. We advise users not to visit or trust this
SirAttacker is ransomware that our team discovered during an analysis of malware samples submitted to VirusTotal. SirAttacker encrypts data, appends its extension (four random characters) to filenames, changes the desktop wallpaper, and displays a ransom note. An example of how SirAttacker modifi
Our research team discovered the adforprocessor[.]com rogue page during a routine inspection of suspicious websites. This webpage operates by promoting browser notification spam and redirecting visitors to other (likely unreliable/harmful) sites. Users primarily access pages like adforprocessor[.
After conducting an inspection of advnotsystems[.]com, we have determined that it is a deceptive page that displays a fake message in an attempt to persuade visitors to agree to receive notifications. Furthermore, we discovered that advnotsystems[.]com redirects visitors to other shady sites. As a
While investigating new submissions to VirusTotal, our researchers discovered the Clown ransomware. This malicious program is based on the Chaos ransomware. When we executed a sample of Clown (Chaos) ransomware on our testing system, it encrypted files and appended their filenames with a ".clown"
After examining advnotreviews[.]com, we have determined that its main purpose is to deceive visitors into agreeing to receive notifications. We came across this website during an inspection of pages that use suspicious advertising networks, and it is not a site that users intentionally visit.
Our team recently came across a ransomware variant called Tuslamon, which is associated with the Xorist family. We discovered Tuslamon while inspecting samples submitted to VirusTotal. Tuslamon encrypts files and adds the ".tuslamon" extension to their filenames. Additionally, it generates an err
Our researchers discovered the iageandinone[.]com rogue page during a routine investigation of suspicious websites. This webpage is designed to promote browser notification spam; at the time of research, it employed fake CAPTCHA for this purpose. Additionally, the page can redirect visitors elsewh
While investigating untrustworthy sites, our research team found the globalvantnow[.]com rogue webpage. It is designed to promote browser notification spam and redirect visitors to other (likely unreliable/harmful) websites. Users typically access globalvantnow[.]com and similar sites through redi