Discovered by Michael Gillespie, Grod is malicious software belonging to the Stop/Djvu ransomware family. It operates by encrypting data and demanding ransom payments for decryption. During the encryption process, all files are appended with the ".grod" extension. Therefore, "1.jpg" becomes "1.jp
mp3hub[.]com offers a video download and conversion service. People can use this page to download videos from YouTube, Soundcloud, and Facebook. We advise against using it for two reasons: 1) it is illegal to download videos from YouTube, and; 2) mp3hub[.]com uses rogue advertising networks. This
Noname is a group of scam sites. For example, nonamenba and nonamebnm are part of this family. These websites are designed to endorse untrustworthy applications. One of their commonly promoted applications is Smart Mac Booster, a Potentially Unwanted Application (PUA). By using scare tactics, t
Search Defender Prime (previous version was simply called Search Defender) is a rogue application that supposedly allows users to search safely and avoid system infections. This functionality may seem legitimate and useful, however, Search Defender Prime is categorized as a potentially unwanted a
Discovered by PaulM, LimeRevenge is a remote access trojan (RAT) and a new variant of RevengeRAT. This malware is designed to allow remote access to infected devices, thereby granting control over them. RAT infections are deemed to be high-risk and can cause a variety of severe issues. There
losx.xyz is one of many fake search engines. Two of the apps used to promote it are called APP (on Chrome) and SDL (on Firefox), however, other apps might also be used. Typically, apps that promote fake search engines are categorized as browser hijackers and potentially unwanted applications (PUAs
qqs7.xyz is the address of a fake search engine, which is promoted through a potentially unwanted application (PUA) called APP (in fact, it is likely that developers also promote qqs7.xyz via other rogue applications). This PUA is related to another app of this type called QIP. Both are categoriz
"CVE-2018-10562" is the code name of a vulnerability discovered in a variety of Dasan GPON home routers. Cyber criminals have recently started a new spam campaign naming it after this vulnerability. It is designed to extort money by threatening to expose evidence of users' sexual activity. The cy
ANTEFRIGUS is the name of a ransomware infection. Generally, malware of this type is designed to encrypt files with a strong encryption algorithm that can only be decoded with specific decryption software and/or key. In fact, this particular ransomware does not encrypt files stored on the C (C:) d
streampoint[.]live is a rogue website, sharing similarities with notification-centar.com, windowsguidenews.com, robotornotcheckonline.club, and many others. It operates by presenting visitors with dubious content and/or redirecting them to other untrustworthy/malicious web pages. Few users access