Our researchers discovered the Nature Extension while inspecting suspicious websites. This browser extension displays nature-themed browser wallpapers. After analyzing Nature Extension, we learned that it is a browser hijacker. It makes changes to browser settings in order to promote the find.bsea
Our research team found the rechanque[.]com page during a routine investigation of suspect websites. It operates by promoting spam browser notifications and redirecting users to other (likely untrustworthy/dangerous) sites. Most visitors to webpages like rechanque[.]com enter them through redirec
Upon analysis of the Architecture Tab browser extension, our team has determined that it operates as a browser hijacker by altering browser settings to promote a fake search engine called srchingoz.com. It is important to note that users typically add browser hijackers such as Architecture Tab to
Owletguide[.]com is a rogue webpage that our research team discovered while investigating dubious websites. This page is designed to push browser notification spam and redirect visitors to different (likely unreliable/malicious sites). Users typically enter webpages like owletguide[.]com through
Gosteadybuddy[.]store has been identified as an untrustworthy website that uses clickbait tactics to deceive visitors into subscribing to its notifications. Our team found gosteadybuddy[.]store while researching web pages that use questionable advertising networks. It is worth noting that most use
Gatz is part of the Djvu ransomware family and operates by encrypting files and adding the ".gatz" extension to their names. In addition, the ransomware produces a "_readme.txt" file containing guidelines on how to pay the ransom. Our researchers encountered Gatz during an analysis of malware samp
After inspecting the "Domain Ownership Has Expired" email, we determined that it is spam operating as a phishing scam. The fake letter states that due to expired domain ownership, the recipient's email account will be deactivated. This spam email aims to deceive recipients into attempting to sign
Topdomainblog[.]com aims to deceive its visitors into subscribing to its notifications. Also, this page redirects visitors to other dubious websites. Our team stumbled upon topdomainblog[.]com during an investigation of web pages that use shady advertising networks. Users rarely visit sites like t
During our examination of pages that use shady advertising networks, we discovered gosteadyplaymate[.]store - a deceptive page designed to lure visitors into agreeing to receive notifications. Gosteadyplaymate[.]store displays deceptive content as a lure. Thus, gosteadyplaymate[.]store and similar
Our examination of the "MyGov Secure Message" email revealed that it is fake. This phishing letter is presented as a notification from myGov – a multi-purpose service provided by the Australian Government. myGov primarily deals with government-related (or adjacent) services by providing digital id