Our researchers discovered the Sport Engine browser extension while investigating scam sites. This piece of software supposedly allows users to customize their new browser tabs with sports-related backgrounds. However, our analysis revealed that it operates as a browser hijacker. Sport Engine mod
"Apple iPhone 14 Winner" is a scam promoted on deceptive websites. There are multiple variants of this scheme. The common theme is that the user has won an iPhone 14 or they are offered a chance to win the smartphone. It must be stressed that these claims are fake and they are not associated with
During an examination of malware samples submitted to VirusTotal, we discovered a new Key Group ransomware variant dubbed ExilenceTG. We found that ExilenceTG encrypts files, appends the ".exilenceTG" extension to filenames, and creates a text file ("cyber.txt"). An example of how ExilenceTG rena
During a routine inspection of deceptive websites, our researchers discovered an installer containing the "Player" app. Our investigation revealed that this piece of software operates as adware. In other words, Player runs intrusive advertisement campaigns and may have other harmful functionalitie
Rankcaptcha[.]top is a site crafted to deceive visitors into accepting its notifications and potentially divert them to other comparable pages. It is uncommon for such pages to be opened intentionally by users. Our team came across rankcaptcha[.]top during an examination of pages utilizing fraudul
Our research team discovered the DeathRansom ransomware-type program during a routine inspection of new submissions to VirusTotal. This malicious program is part of the Chaos ransomware family. Once we executed a sample of DeathRansom (Chaos) ransomware on our test machine, it encrypted files and
Greatcaptchahere[.]top is one of the pages that display deceptive content to lure visitors into allowing them to show notifications. We discovered greatcaptchahere[.]top while inspecting sites that use rogue advertising networks. Users do not open pages like greatcaptchahere[.]top on purpose.
During our analysis of undescoidecimy[.]com, we discovered that it employs a clickbait technique to entice visitors into allowing it to display notifications. Furthermore, it may redirect to other untrustworthy websites. Consequently, undescoidecimy[.]com is not a reliable website. We came across
During our evaluation of toppillarrect[.]com, we observed that the website displays a deceitful message to persuade its visitors to consent to receive notifications. Additionally, toppillarrect[.]com may redirect users to other dubious websites. Therefore, toppillarrect[.]com is unreliable and sho
Our malware experts came across Darj while analyzing malware samples submitted to VirusTotal. Darj is ransomware that is part of the Djvu family. Its modus operandi is to encrypt data and affix the ".darj" extension to the filenames and produce a ransom note (the "_readme.txt" file). An example o