Virus and Spyware Removal Guides, uninstall instructions

What is the fake "$doginme Airdrop"?

While investigating deceptive websites, our researchers discovered the "$doginme Airdrop" scam on dogin-meme.pages[.]dev (keep in mind that it could be hosted elsewhere).

This airdrop is fake, and it is not associated with any existing projects, platforms, or entities. The scam functions as a crypto drainer – by siphoning funds from victims' digital wallets.

What kind of scam is "Claim $APED"?

Our team has inspected this web page (apedcto[.]xyz) and concluded that it is a scam website offering individuals to claim crypto tokens. It is a copy of the original web page (apederc[.]com). The ultimate goal of the deceptive website is to trick visitors into performing steps that can result in monetary loss.

What is NotLockBit?

NotLockBit is ransomware masquerading as the LockBit ransomware. It targets both Windows and Mac users. NotLockBit is capable of both encrypting and exfiltrating (stealing) files. Also, this ransomware changes the victim's desktop. In addition to encrypting files, NotLockBit renames them.

It renames files using the following format: [original file name].[initialization vector].abcd. For instance, it renames "1.jpg" to "1.jpg.3544329bb141eea628f7c3bff6c79c11.abcd", "2.png" to "2.png.c1f3b4d9f4c2eb1a6e7a9c3b7f1c2a92.abcd", and so forth.

What kind of malware is Multiverze?

Multiverze is a piece of malicious software targeting Mac operating systems (macOS). This malware aims to steal sensitive information from victims' devices. Multiverze has been noted being proliferated using social engineering tactics, specifically – through social media spam.

What is the fake "OpenSea NFT Offer"?

We have inspected the "OpenSea NFT Offer" website (connect-web3[.]dev) and found that it is a scam masquerading as the legitimate OpenSea platform. It is created to trick individuals into taking actions that could lead to significant financial losses. Users should avoid sites like connect-web3[.]dev.

What is the fake "Veda Points Multiplier" site?

During our analysis of the page, we discovered that it mimicks the original site, veda[.]tech to deceive individuals. The purpose of this fraudulent web page is to lure visitors into performing steps that could result in monetary losses. Therefore, it is highly advisable to be careful when encountering unofficial sites like this one.

What kind of page is altaipeak[.]top?

Our research team found the altaipeak[.]top rogue page while browsing untrustworthy websites. After examining this webpage, we determined that it promotes browser notification spam and redirects users to different (likely unreliable/hazardous) sites.

Visitors to altaipeak[.]top and similar pages primarily access them through redirects caused by websites employing rogue advertising networks.

What kind of malware is PowerRAT?

PowerRAT is a piece of malicious software categorized as a RAT (Remote Access Trojan). These trojans are designed to allow attackers remote access and control over compromised machines. RATs tend to be multi-functional and highly versatile.

PowerRAT malware has been observed being proliferated via sophisticated email spam campaigns targeting Russian-speaking users.

What kind of application is EssentialSector?

Our researchers found the EssentialSector rogue application while inspecting new submissions to VirusTotal. After examining this piece of software, we learned that it is adware from the AdLoad malware family. EssentialSector operates by feeding users with undesirable and possibly malicious ads.

What kind of email is "Security Token For Business Email Is Outdated"?

Upon inspecting "Security Token For Business Email Is Outdated", we determined that this email is spam. It claims that the recipient risks having their business email deleted from the servers unless the security token is updated.

This information is false, and the scam mail is not associated with any genuine service providers. The purpose of this email is to trick recipients into revealing their log-in credentials to a phishing website.