We discovered Dfwe while examining malware samples submitted to VirusTotal. It is ransomware - malware that encrypts files and demands payment for their decryption. Dfwe appends the ".dfwe" extension to filenames and creates the "_readme.txt" file (a ransom note). We also found that Dfwe is part o
Primerewardz[.]com is a shady website that asks for permission to show notifications and redirects to a scam website (and possibly other untrustworthy pages). Our team discovered it during an analysis of pages that use rogue advertising networks (e.g., illegal movie streaming pages, torrent sites)
TrackFrequency is a rogue app, which we discovered while inspecting new submissions to VirusTotal. After analyzing this piece of software, we determined that it is adware, and that it belongs to the AdLoad malware family. It is noteworthy that advertising-supported software may require c
Our team has examined this email and concluded that the scammers behind it aim to trick recipients into providing passwords. This email is disguised as a letter from the email service provider. It contains a link to a phishing page asking to provide login credentials (email address and password).
Our research team found the reuse tab browser extension while inspecting suspicious download webpages. We installed this piece of software onto our test machine, and based on its description in Chrome - we can surmise that this extension promises to save visited URLs for easy access in the future.
During a routine inspection of deceptive websites, our researchers discovered "MICROSOFT WINDOWS With Pre-installed Mcafee". After inspecting it, we determined that this content operates as a technical support scam with phishing elements. The former attempt to trick users into calling fake helplin
Strongix.exe is a piece of malicious software, which our research team discovered while looking through fake "cracked" software download sites. This malware operates by force-opening various untrustworthy and malicious websites. It is not unlikely that Strongix.exe has additional harmful abilities
KurayStealer is the name of a malware builder that we found promoted on Discord. KurayStealer has the ability to steal passwords and capture screenshots. It is written in the Python programming language. We also learned that there are free and paid versions of the KurayStealer malware builder (the
Discovered by Cyble Research Labs, Eternity is a ransomware-type program that is part of the Eternity malware family. Ransomware is designed to encrypt data and make ransom demands for the decryption. When we launched a sample of Eternity on our test machine, we learned that it encrypts files usi
After analyzing the page, we concluded that it is a scam website operated by individuals who aim to collect illegitimate commissions from purchases made via their page. This page uses a scare tactic to trick visitors into purchasing antivirus software. It is highly advisable to ignore websites of