We discovered news-tulode[.]com while inspecting untrustworthy sites. It is designed to push browser notification spam and redirect visitors to other (likely dubious/malicious) webpages. Most users enter such websites via redirects caused by pages using rogue advertising networks. The cont
While inspecting dubious download sources, our research team discovered the QuickPDFConverterSearch browser extension. After analyzing it, we learned that it operates as a browser hijacker promoting the quickpdfconvertersearch.com fake search engine. Following successful installation onto
Notadszones[.]com is a rogue page designed to push browser notification spam and redirect visitors to different (likely untrustworthy/malicious) sites. Our research team discovered notadszones[.]com while inspecting shady webpages. Users typically enter such websites inadvertently; most enter the
While checking various forums, we found a new ransomware called Pipikaki. It encrypts files, modifies filenames, and creates a ransom note. Pipikaki appends the victim's ID and ".@PIPIKAKI" extension to filenames. Its ransom note is a file named "WE CAN RECOVER YOUR DATA.txt". An example of how P
Lucifer Kobs is a piece of malicious software classified as ransomware. We discovered this program while inspecting new malware submissions to VirusTotal, and learned that it is a new variant of the Spora ransomware. After we executed a sample of this ransomware onto our test machine, it encrypte
After downloading and installing the BestSportSearches application, we learned that it is a browser-hijacking application that makes certain changes in the settings of a web browser. The purpose of this app is to promote the bestsportsearches.com address - a fake search engine. A big part of brows
While inspecting untrustworthy websites, we found the freeadvfit[.]com webpage. It is designed to promote browser notification spam and redirect visitors to other (untrustworthy/malicious) sites. Users typically access such webpages through redirects caused by sites using rogue advertising network
Exotikcontent[.]ru is one of the many deceptive websites designed to trick visitors into agreeing to receive notifications. They are rarely visited on purpose. We have discovered exotikcontent[.]ru while examining pages that use rogue advertising networks (pages that redirect to shady websites and
NewVideosSearch is the name of a browser extension. After analyzing it, we determined that this piece of software works as a browser hijacker. NewVideosSearch makes changes to browser settings in order to promote the newvideosearch.com fake search engine. Following installation onto our te
Notfcompsystems[.]com is a website designed to trick visitors into allowing it to show notifications. Additionally, it redirects to other untrustworthy pages. We have discovered notfcompsystems[.]com while analyzing other pages that use shady advertising networks. Notfcompsystems[.]com use