While investigating new submissions to the VirusTotal website, our research team discovered the Elibe ransomware. It is designed to encrypt data and demand ransoms for the decryption. On our testing system, this ransomware encrypted files and altered their filenames. Original titles were appended
Following our evaluation of the Zen Searcher app, our team has determined that its primary purpose is to function as a browser hijacker aimed at promoting search.zensearcher.com (a fake search engine). This extension alters browser settings to assert control. It is advisable to remove Zen Searcher
Following an evaluation of the website, our team has determined that it is promoting a deceptive giveaway. Scammers commonly use websites featuring misleading pop-up messages or comparable content to lure visitors into revealing sensitive details, making financial transactions, or engaging in othe
After conducting a comprehensive examination, our team has determined that the purpose of this email is to deceive recipients into divulging their personal information. These emails are categorized as phishing attempts, and in this particular case, the scammers impersonate an email service provide
ZeroCool ransomware is a type of malware that encrypts files. In addition to encrypting data, ZeroCool adds the ".ZeroCool" extension to filenames and provides a ransom note ("ZeroCool_Help.txt"). An illustration of how files encrypted by ZeroCool are renamed: "1.jpg" is changed to "1.jpg.ZeroCool
In our examination of strongpcfundamentals[.]com, we found that the website's primary intent is to mislead visitors into believing their computers are compromised. Furthermore, strongpcfundamentals[.]com requests permission to send notifications. It is important to note that users often land on si
Our research team discovered the avob.co[.]in rogue webpage while inspecting suspicious sites. It operates by promoting browser notification spam and redirecting visitors to other (likely unreliable/harmful) websites. Users primarily access avob.co[.]in and similar pages through redirects generat
While investigating new file submissions to the VirusTotal website, our researchers discovered the DynamicExplorer application. After inspecting it, we determined that DynamicExplorer is advertising-supported software (adware) belonging to the AdLoad malware family. Adware is designed to
Cityscapes is a browser extension that promises to display browser wallpapers depicting cityscapes and urban skylines. Our researchers found this piece of software while investigating deceptive websites. After analyzing Cityscapes, we learned that it modifies browser settings and promotes (via red
Our research team found the ElementaryDivision adware while inspecting new submissions to the VirusTotal website. When we examined this piece of software, we determined that it is adware. ElementaryDivision is part of the AdLoad malware family. This application is designed to deliver intrusive a