7afuy is a piece of malicious software categorized as ransomware. Our research found this malware and sampled it from VirusTotal. Once launched onto our test system, this ransomware encrypted files and appended their filenames with a random character string and the ".7afuy" extension. For example
NavigateSystem is a rogue app that we discovered while inspecting new submissions to VirusTotal. After analyzing it, we have determined that this application operates as advertising-supported software (adware). We also found that NavigateSystem belongs to the AdLoad malware family. Follo
Gobrowser.xyz is the address of a fake search engine. We discovered this website while analyzing browser hijackers, which promote (by causing redirects to) such search engines. Browser hijackers promote illegitimate search engines (e.g., gobrowser.xyz) by assigning them as the browsers'
CommonAnalyser is an adware-type application that our research team discovered while inspecting new submissions to VirusTotal. This piece of software operates by running intrusive advertisement campaigns. We also determined that it belongs to the AdLoad malware family. Advertising-suppor
"New Contract Documents Received" is a spam email that we inspected and classified as a phishing scam. This letter attempts to trick the recipient into disclosing their email account log-in credentials by claiming they have been sent documents concerning a new contract. The spam email with
Discovered by our research team while inspecting dubious software-endorsing webpages, Snowy Tab is a browser extension. It is advertised as a tool that allows users to change their browser background/wallpaper and use other handy features. Having analyzed Snowy Tab, we can conclude that it is a b
We have discovered the Daily Tab application/browser extension while examining pages that use questionable advertising networks and other suspicious pages. It was found that Daily Tab is a browser hijacker that changes the settings of the affected web browser to promote search.daily-stop.com (a fa
Spin Dark is a browser extension discovered by our research team while inspecting untrustworthy download webpages. This piece of software is advertised as a tool capable of enabling dark mode for simple design websites. After analyzing Spin Dark, we determined that it behaves like a browser hijac
Electron Bot is the name of the malware that has been discovered by Check Point Research. We have learned that Electron Bot is used to gain remote access to computers and execute various commands. It is distributed via various applications on the Microsoft Store (Electron Bot targets Windows devic
Vote2024 (also known as HermeticRansom and PartyTicket) is the name of a malicious program that was discovered during geopolitically-motivated malware attacks against Ukraine and its surrounding territories, which occurred during the onset of war in Ukraine. Vote2024 is a ransomware-type program.