Ad Blocker App is promoted as a free browser extension that blocks advertisements. Ironically, after testing the app, we found that it generates advertisements (it is an advertising-supported application). It is worth mentioning that adware is often distributed using questionable methods - users t
While inspecting questionable sites, we discovered the notificationnewsspace[.]com rogue webpage. It promotes browser notification spam (via fake CAPTCHA) and redirects visitors to other (likely untrustworthy/malicious) websites. Most users enter such webpages through redirects caused by sites usi
Tuning Videos is described as an app that protects the eyes and improves sleeping cycles by adjusting video temperature and many other properties. After downloading and adding it to a browser, we found that it has an additional property - it shows advertisements. Thus, we categorized Tuning Videos
Rrbb is the name of ransomware that our team has discovered during the analysis of malware samples submitted to VirusTotal. We found that Rrbb belongs to a ransomware family called Djvu. It encrypts files, appends the ".rrbb" extension to filenames, and provides a ransom note (in the "_readme.txt"
We have discovered new ransomware belonging to the Djvu family while analyzing the samples submitted to VirusTotal. It is called Rryy. This ransomware encrypts files, appends its extension (".rryy") to filenames, and generates a text file ("_readme.txt") containing a ransom note. An example of ho
Advnottech[.]com is a rogue webpage that operates by pushing browser notification spam and redirecting visitors to other (likely untrustworthy/malicious) sites. Our researchers discovered this page while inspecting websites that use rogue advertising networks. Most users access advnottech[.]com (
Our research team found the updatenotification[.]xyz rogue page during a routine inspection of untrustworthy sites. It is designed to promote deceptive content (scams), push browser notification spam, and redirect visitors to different (likely unreliable/malicious) webpages. At the time of researc
Our team has examined this email and learned that it is part of a phishing campaign. Scammers behind it attempt to trick recipients into providing sensitive information via the provided website. The email is disguised as a letter from the Ministry of Finance of Spain. It is written in the Spanish
ZareuS is ransomware that encrypts files and appends the ".ZareuS" extension to filenames. We discovered this ransomware on the VirusTotal page (while checking the page for recently submitted samples). ZareuS provides contact and payment instructions in its ransom note, a text file named "HELP_DEC
While inspecting new submissions to VirusTotal, our research team discovered the ElementForce application. After analyzing this piece of software, we learned that it is adware belonging to the AdLoad malware family. Adware enables the placement of third-party graphical content (various a