TrapStealer is a piece of versatile information-stealing malware. This malicious program targets a wide variety of data, particularly information related to the Discord messaging platform. After successfully infiltrating a system, TrapStealer starts collecting device data, like its name, g
During our evaluation of the Goals Tracker browser extension, we noticed its intent to promote a counterfeit search engine by tampering with web browser settings, a practice commonly referred to as browser hijacking. It is important to emphasize that browser hijackers, such as Goals Tracker, are u
Poverty is a typical information stealer, lacking unique features distinguishing it from more proactive types of stealers. Cybercriminals employ malware like Poverty to compromise the privacy and security of individuals and organizations. These malicious tools infiltrate systems, collect sensitive
Our research team discovered the GoTiS ransomware during a routine investigation of new submissions to the VirusTotal website. This malicious program is part of the Xorist ransomware. This malware encrypts data and demands ransoms for its decryption. On our testing system, GoTiS encrypted files a
ObjCShellz is a newly discovered macOS malware associated with the BlueNorOff hacking group. This malware is specifically designed to target macOS devices. What sets ObjCShellz apart is its capability to open remote shells on compromised macOS systems, enabling unauthorized access and control ov
GootBot is a new variant of the GootLoader malware. It is used as a lateral movement tool. This malicious program is exceedingly lightweight and has an emphasis on stealth. Essentially, GootBot is implemented in the later stages of extensive attacks, wherein this software moves laterally through a
Jzeq is ransomware belonging to the Djvu family, and it has been discovered while inspecting samples submitted to the VirusTotal page. Jzeq blocks access to files by encrypting them, appends the ".jzeq" extension to filenames, and provides a ransom note ("_readme.txt"). For instance, it renames "1
While analyzing malware samples submitted to VirusTotal, we encountered a ransomware variant known as Jzie. Jzie has been crafted to encrypt files and alter their names by adding the ".jzie" extension. Additionally, Jzie generates a ransom note, which can be found in a file named "_readme.txt". J
While assessing the Photon Search browser extension, we observed its intention to promote a fake search engine by manipulating web browser settings, a behavior often known as browser hijacking. It is essential to note that browser hijackers like Photon Search are typically advertised through dubio
While inspecting dubious sites, our research team discovered the Qwik Ant browser extension. It is endorsed as a productivity tool for easy access to various popular platforms and services. Qwik Ant makes changes to browser settings to promote (via redirects) the search.qwikant.com illegitimate se