We discovered the AdvanceServices application while inspecting a deceptive website claiming that some installed software is outdated. After downloading and installing it on the operating system, we learned that AdvanceServices generates advertisements and has no useful features. Therefore, we co
Downloading Files is a rogue browser extension that our researchers discovered while inspecting dubious software-promoting sites. This extension is endorsed as a download management tool. After analyzing Downloading Files, we determined that it operates as advertising-supported software (adware).
Our research team found the CompellingEntry application during a routine inspection of new submissions to VirusTotal. After analyzing this piece of software, we determined that CompellingEntry is adware that belongs to the AdLoad malware family. Adware may require certain conditions to r
While inspecting new submissions to VirusTotal, our researchers found a new variant of the Rozbeh ransomware named Quax0r. We acquired a sample of this ransomware and executed it on our test system. Typically, these malicious programs alter the filenames of encrypted files; however, that is not t
Redox is the name of a stealer-type malware that our researchers found while inspecting hotspots for selling malicious software. Redox is designed to extract sensitive information from infected systems and various applications installed onto them. According to Redox stealer's promotional m
Windows-hold[.]com is a deceptive website that runs a scam similar to "McAfee - Your PC is infected with 5 viruses!". Also, it asks for permission to display notifications. We discovered windows-hold[.]com while inspecting other pages that use rogue advertising networks (illegal movie streaming, t
Moviety is described as "a perfect browser extension for movie lovers of all stripes". We have discovered this app on a deceptive website. After downloading and adding Moviety to a browser, we noticed that it shows intrusive advertisements. It means that Moviety is an advertising-supported applica
Our researchers discovered the online-guard[.]com rogue page while inspecting dubious websites. This webpage is designed to promote scams, push spam browser notifications, and redirect visitors elsewhere (likely unreliable/malicious websites). Most users enter sites of this kind via redirects caus
Ad Blocker App is promoted as a free browser extension that blocks advertisements. Ironically, after testing the app, we found that it generates advertisements (it is an advertising-supported application). It is worth mentioning that adware is often distributed using questionable methods - users t
While inspecting questionable sites, we discovered the notificationnewsspace[.]com rogue webpage. It promotes browser notification spam (via fake CAPTCHA) and redirects visitors to other (likely untrustworthy/malicious) websites. Most users enter such webpages through redirects caused by sites usi