While investigating suspicious sites, our researchers discovered the monadvs[.]com rogue webpage. It is designed to promote browser notification spam and redirect visitors to other (likely unreliable/hazardous) websites. Most users access pages of this kind via redirects caused by sites using rogu
Our researchers found the InputDivision application while reviewing new submissions to the VirusTotal website. After examining this piece of software, we discovered that InputDivision is adware belonging to the AdLoad malware family. Adware stands for advertising-supported software. It i
Through our investigation, we have determined that gehoochosurvey[.]top is an untrustworthy website engaged in fraudulent survey activities. Additionally, this site employs tactics to entice users to enable notifications and may redirect them to other unreliable pages. It is important to note that
While investigating web pages associated with suspicious advertising networks, our team encountered fadszone[.]com. Upon analysis, we have determined that fadszone[.]com engages in a deceptive practice by utilizing a clickbait technique to deceive visitors into subscribing to its notifications. It
NURRI is ransomware our malware researchers discovered while inspecting samples on the VirusTotal page. We found that NURRI is part of the Phobos family. It encrypts files, appends the ".NURRI" extension to filenames (along with the victim's ID and nury_espitia@tuta.io email address), and provides
Not-robot[.]top is a rogue webpage that is designed to promote spam browser notifications and redirect users to other (likely unreliable/harmful) sites. Most visitors to this and similar pages access them via redirects caused by websites using rogue advertising networks. Our research team discove
Our inspection of the "MailBox Warning" email revealed that it is fake. This spam letter falsely claims that irregular activity was detected on the recipient's email account. The goal of this phishing mail is to trick recipients into disclosing their account credentials. The email with the
After reviewing the "Account Status At Risk" email, we determined that it is spam. By making false claims that the recipient's email account will be suspended, it aims to trick them into providing their log-in credentials to a phishing website. The spam email with the subject "Take steps t
After investigating the "Microsoft Outlook Account Will Be Disconnected" letter, we determined that it is a phishing email targeting log-in credentials. The recipient is warned that due to unresolved issues, their Microsoft Outlook account will be deactivated. However, this is a ploy to trick them
CustomerLoader is a malicious program designed to cause chain infections. In other words, it loads additional malicious components and programs onto compromised devices. All known CustomerLoader infections relied on the DotRunpeX injector trojan to infiltrate the final payload. Over forty malware