During an examination of malware samples submitted to VirusTotal, we discovered a new Key Group ransomware variant dubbed ExilenceTG. We found that ExilenceTG encrypts files, appends the ".exilenceTG" extension to filenames, and creates a text file ("cyber.txt"). An example of how ExilenceTG rena
During a routine inspection of deceptive websites, our researchers discovered an installer containing the "Player" app. Our investigation revealed that this piece of software operates as adware. In other words, Player runs intrusive advertisement campaigns and may have other harmful functionalitie
Rankcaptcha[.]top is a site crafted to deceive visitors into accepting its notifications and potentially divert them to other comparable pages. It is uncommon for such pages to be opened intentionally by users. Our team came across rankcaptcha[.]top during an examination of pages utilizing fraudul
Our research team discovered the DeathRansom ransomware-type program during a routine inspection of new submissions to VirusTotal. This malicious program is part of the Chaos ransomware family. Once we executed a sample of DeathRansom (Chaos) ransomware on our test machine, it encrypted files and
Greatcaptchahere[.]top is one of the pages that display deceptive content to lure visitors into allowing them to show notifications. We discovered greatcaptchahere[.]top while inspecting sites that use rogue advertising networks. Users do not open pages like greatcaptchahere[.]top on purpose.
During our analysis of undescoidecimy[.]com, we discovered that it employs a clickbait technique to entice visitors into allowing it to display notifications. Furthermore, it may redirect to other untrustworthy websites. Consequently, undescoidecimy[.]com is not a reliable website. We came across
During our evaluation of toppillarrect[.]com, we observed that the website displays a deceitful message to persuade its visitors to consent to receive notifications. Additionally, toppillarrect[.]com may redirect users to other dubious websites. Therefore, toppillarrect[.]com is unreliable and sho
Our malware experts came across Darj while analyzing malware samples submitted to VirusTotal. Darj is ransomware that is part of the Djvu family. Its modus operandi is to encrypt data and affix the ".darj" extension to the filenames and produce a ransom note (the "_readme.txt" file). An example o
Updaterlife[.]com is a rogue page that we discovered while investigating suspicious websites. It promotes browser notification spam and redirects visitors to different (likely untrustworthy/dangerous) sites. Users primarily access webpages like updaterlife[.]com via redirects caused by sites usin
Our research team discovered the Ads Blocker Pro browser extension while investigating rogue webpages. This extension is promoted as an adblocker – a tool that removes advertisements. However, our analysis revealed that Ads Blocker Pro operates as adware. Hence, instead of blocking adverts – it di