While examining the Search-Mgr browser extension, we found that it functions as a browser hijacker: it changes certain browser's settings to searchmgr.online. It forces users to browse the Internet using a shady search engine. It is worth mentioning that browser hijackers usually are promoted and
Our research team discovered the pcprimedefense[.]com rogue webpage while inspecting untrustworthy websites. The page promotes scams and spam browser notifications. Additionally, it is capable of redirecting uses to other (likely unreliable/hazardous) sites. Most visitors to pcprimedefense[.]com
Protectsoftware[.]xyz is a rogue webpage that we discovered while investigating suspicious sites. This page promotes online scams ("You've visited illegal infected website"), pushes spam browser notifications, and redirects visitors to different (likely untrustworthy/harmful) webpages. Users typi
While inspecting rogue websites, our research team found the Tick Tab Clock browser extension. It is presented as a tool that provides aid with time keeping/managing. However, our analysis determined that Tick Tab Clock operates as a browser hijacker. This extension changes browser settings in ord
We discovered the ConnectedField application during a routine inspection of new submissions to VirusTotal. On our test system, this app ran intrusive ad campaigns, and due to this behavior - it is considered to be adware. Additionally, ConnectedField belongs to the AdLoad malware family.
After inspecting the "BRITISH CAMELOT ONLINE LOTTERY" email, we determined that it is spam operating as a phishing scam. It targets personally identifiable information by claiming that it must be provided to claim the lottery prize that the recipient has won. It must be emphasized that these clai
Our team examined pushycaptcha[.]live and learned that it displays a deceptive message to lure visitors into agreeing to receive notifications. Additionally, pushycaptcha[.]live redirects to scam websites. We discovered pushycaptcha[.]live while inspecting websites that use rogue advertising netwo
Our inspection of the "YоuTubе Suppоrt Shared An Item" email revealed that it is spam. Likely targeting users with YouTube accounts, this scam is presented as a notification regarding a copyright-related document shared with the recipients by YouTube Support. It is most probable that the shared f
We inspected this email and found that this is an extortion scam email demanding ransom for not leaking the company's data. Scammers aim to trick recipients into believing that hackers will leak stolen data and damage their reputation if they do not make a payment. This is just a scam. Thus, this
AXLocker is a ransomware-type program. Malware of this type is designed to encrypt data (i.e., render files inaccessible) and demand payment for the decryption tools. Typically, ransomware renames encrypted files - often by appending them with an additional extension. However, on our test machine