While investigating suspect websites, our researchers found the notquiteso[.]buzz rogue page. It pushes spam browser notifications and redirects visitors to different (likely untrustworthy/harmful) sites. Users typically access such webpages through redirects caused by sites that use rogue adverti
Roblox (not to be confused with the online video game platform of the same name) is a piece of malicious software classified as ransomware. This program is based on the Jigsaw ransomware. Once we executed a sample of Roblox on our testing system, it encrypted files and appended their filenames wi
FurBall is the name of a malicious program that targets Android Operating Systems (OSes). FurBall operates as spyware - i.e., spies on victims and extracts sensitive data from their devices. According to the findings of ESET's WeLiveSecurity researchers, there is evidence connecting this malware
Searchproonline.com is both the address of a fake search engine and the name of the browser hijacker promoting it. This software modifies browser settings to cause redirects to illegitimate search engines (e.g., searchproonline.com, etc.). Additionally, most browser hijackers collect private data.
Our team analyzed this email letter and found that it is a scam email written by scammers who aim to trick recipients into providing sensitive information. Emails of this type are called phishing emails. Scammers behind this particular email aim to lure recipients into opening the provided link an
FractionElement is a piece of rogue software that our researchers found while inspecting new submissions to VirusTotal. After analyzing this application, we determined that it operates as advertising-supported software (adware) and belongs to the AdLoad malware family. Adware is designed
Our team examined the Secure Search Pro browser extension and learned that it is a browser hijacker. This app changes the settings of a web browser to promote securesearch.pro - a fake search engine. We discovered Secure Search Pro while inspecting shady web pages. Most browser hijackers are promo
While examining dolty[.]click, we learned that it runs the "McAfee - Your PC is infected with 5 viruses!" scam to trick visitors into purchasing an antivirus software subscription. Also, it wants to deliver notifications. Usually, pages like dolty[.]click are promoted using shady methods. We disc
Our research team found the Lumino_Ransom ransomware while inspecting new malware submissions to VirusTotal. After we executed a sample of this ransomware on our test system, it encrypted files and appended their filenames with a ".lumino_locked" extension. To elaborate, a file initially titled "1
Eu is the name of ransomware that our team discovered while examining malware samples submitted to the VirusTotal page. Ransomware is a form of malware that encrypts files. Typically, it renames files and provides a ransom note as well. Eu appends ".eu" extension to filenames, changes the desktop