After examining 62IX, we learned that it is ransomware that encrypts files, appends the ".62IX" extension to filenames, changes the desktop wallpaper, and creates the "КАК РАСШИФРОВАТЬ FILES.txt" file (a ransom note). Our team discovered 62IX while checking the VirusTotal page for recently submitt
Our research team discovered Cyber_Puffin during a routine inspection of new submissions to VirusTotal. This malicious program is classified as ransomware, a type of malware that encrypts data and demands payment for decryption. After we launched a sample of Cyber_Puffin on our test machine, it e
While examining the PowerSet application, we noticed that various ads appear while this app is installed. Software that displays unwanted advertisements is called adware. Typically, users install software of this type unintentionally. We discovered PowerSet while inspecting deceptive websites.
During a routine investigation of suspicious websites, our researchers discovered the antivirus-stability[.]com rogue page. It is designed to promote deceptive content; when we inspected antivirus-stability[.]com, it ran the "You've visited illegal infected website" scam. Additionally, this site p
While inspecting dubious software-promoting sites, our researchers discovered one advertising the EmailCheckToday browser extension. This piece of software is endorsed as an easy-access tool for email services. Instead, we determined that EmailCheckToday operates as a browser hijacker - it modifi
While inspecting deceptive software-promoting websites, we discovered the No-Light browser extension. This piece of software is presented as a tool capable of creating a dark mode for simple design websites. However, our analysis revealed that No-Light operates as advertising-supported software (a
After inspecting the securityservice-pc[.]com page, we discovered that it runs the "McAfee - Your PC is infected with 5 viruses!" scam and asks for permission to deliver notifications. Our team encountered this site while examining pages that use rogue advertising networks. It is very uncommon for
Shiny Searches is the name of a browser extension that our team discovered on a website offering fast Internet search results. After downloading and adding Shiny Searches to a web browser, we noticed certain changes in its settings. Shiny Searches hijacks a web browser to promote search.shiny-sear
While inspecting deceptive software-promoting websites, our research team discovered an ISO file containing the Streamlink-twitch-gui adware. Software within this classification is designed to run intrusive advertisement campaigns. However, Streamlink-twitch-gui is part of the ChromeLoader malware
After analyzing the Easy-Eye browser extension, we found that it shows annoying advertisements and is supposed to provide a dark mode for simple pages. Apps that display unwanted ads are classified as adware. Our team discovered Easy-Eye on a deceptive page claiming that adding this app to a web b