TONResolver is a Remote Access Trojan (RAT) written in JavaScript and run through the legitimate Node.js runtime. Once active, it opens a persistent encrypted connection to an attacker-controlled server and waits for instructions, giving operators the ability to execute code, retrieve files, and d
QuimaRAT is a Java-based Remote Access Trojan (RAT) sold to cybercriminals as a subscription service. This model, known as Malware-as-a-Service (MaaS), allows anyone who pays the fee to deploy the RAT against targets of their choosing. According to research published by LevelBlue's SpiderLabs tea
KansasGroup is ransomware our research team identified while analyzing new file submissions on VirusTotal. Like most ransomware, it encrypts files on the infected machine and demands payment in exchange for decryption. On our test machine, this ransomware appended the ".kansas4life" extension to
Own Ransomware is a ransomware-type program discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the infected device and demands payment in exchange for decryption. On our test machine, Own Ransomware appended each filename w
After inspecting this email, we determined that it is a phishing scam. It is disguised as a management portal notification claiming that a proposal evaluation has been completed and the recipient's review is required. The link inside leads to a fake email login page designed to steal account crede
The WebWebWeb.com browser hijacker infiltrates Internet browsers (Google Chrome and Mozilla Firefox) through free software downloads. At time of testing, this website was promoted via an application called 'video downloader professional'. Developers of this browser settings-changing adware (LINK6
.Xyz is a new variant of Jigsaw ransomware. Following infiltration, this ransomware encrypts various files stored on victims' computers. This is achieved using asymmetric cryptography. During encryption, this ransomware appends the name of each encrypted file with a ".xyz" extension and, thus, it
Pulse is a Chromium-based browser. It is promoted as an Internet browser that integrates AI (Artificial Intelligence). Upon inspection, we determined that this rogue browser is a PUA (Potentially Unwanted Application). It produces redirects to several fake search engines that cannot generate searc
Zxcv is malicious software categorized as ransomware. It belongs to the Dharma malware family and is designed to encrypt data and demand payment for decryption. During the encryption process, files are renamed according to this pattern: original filename, unique ID assigned to the victims, cyber c
We have examined this email and concluded that it is a scam. The message impersonates the United States Department of Commerce and falsely claims the recipient has been nominated for the Trump Gold Card selection program. The goal is to trick unsuspecting recipients into paying upfront fees and do
Security researchers have uncovered two separate incidents in which criminals allowed an autonomous AI agent to operate with little or no human oversight during a live intrusion — one against a Thai government ministry and one carried out by a ransomware operation from start to finish. Resea
Security researchers have identified a new Windows-based malware strain called Dolphin X that combines the credential-stealing capabilities of a traditional infostealer with an artificial-intelligence-driven feature designed to help criminals decide which infected computers are worth attacking first
For years, macOS users have enjoyed a reputation for being less attractive targets than their Windows counterparts. While that perception has always been somewhat exaggerated, attackers traditionally invested more heavily in Windows malware because of its larger market share and greater return on in
For years, the cybersecurity industry has debated whether artificial intelligence would fundamentally change offensive cyber operations or simply make existing attackers more productive. Early evidence suggested the latter. Large language models accelerated research, generated scripts, translated ph
Android banking malware has evolved from simple credential-stealing applications into sophisticated remote access platforms capable of persistent device control. The latest version of RedHook shows how quickly mobile threat actors continue to innovate. Rather than relying solely on traditional Andr
Combo Cleaner is an all-in-one solution developed by RCS LT, the company behind PCrisk.com. Making a powerful entrance as a comprehensive antivirus and system optimization solution, it's here to shield you from various threats on Windows, macOS, Android, and iOS.
When assessing the best way to reclaim your privacy, the personal data removal service Incogni is a popular option. It works by automatically sending requests to data brokers and people-search websites, erasing personal information from their databases.
Launched in 2010 by the privacy company Abine and based in the U.S., DeleteMe has over a decade of experience in cleaning up personal information from the web. This review examines DeleteMe's pricing, features, performance, and value.
Optery stands out as the most flexible personal data removal service. Optery may not be overflowing with the advanced features of more expensive services, but it's getting the results done, and lets you only pay for the level of security you require.
When it comes to Privacy Bee, a privacy protection service that scrubs your personal information from data broker databases and public listings, this review, written by the PCrisk team, will be a solid reference.