While checking the VirusTotal page for recently submitted malware samples, we discovered ransomware belonging to the Djvu family dubbed Erqw. This ransomware encrypts data and appends the ".erqw" extension to filenames. Also, it provides a ransom note (creates the "_readme.txt" file). An example
While checking out untrustworthy websites, our researchers discovered an installation setup bundled with the PrintManager malicious program. Additionally, this installer was packed together with adware. Therefore, if a PrintManager infection is detected – it is likely that other unwanted/malicious
We have analyzed the news-mexobi[.]com page and found that it uses a clickbait technique to trick visitors into permitting it to send notifications. Also, news-mexobi[.]com redirects to other deceptive websites. Thus, this site cannot be trusted. News-mexobi[.]com displays a fake video pla
While inspecting rogue websites, our research team discovered the "Ledger Data Damage Error: 0x0m3Ck8n" phishing scam. It is disguised as the Ledger website and targets users' Ledger-based cryptocurrency wallets. After investigating "Ledger Data Damage Error: 0x0m3Ck8n", we determined that this s
Our examination revealed this is a scam website targeting crypto wallet login information. Providing information on such pages results in financial loss and potential additional problems, so this scam page should be ignored. Our team discovered that scammers promote this scam via email (and possib
We have inspected mentseconom[.]xyz and found that the purpose of this web page is to lure visitors into agreeing to receive its notifications. In addition to displaying deceptive content, mentseconom[.]xyz redirects visitors to other untrustworthy websites. Thus, mentseconom[.]xyz should not be t
After reviewing this letter, we found that it is a phishing email. Its purpose is to convince the recipients that they have earned money from crypto mining. This email contains a link to a phishing website where visitors are asked to provide login information. Recipients should ignore this phishin
During the examination of czgovd[.]com, we discovered that this page uses a clickbait technique to trick visitors into allowing it to display notifications. Also, czgovd[.]com redirects to potentially malicious websites. It is uncommon for such pages to be visited intentionally. Czgovd[.]c
While investigating untrustworthy websites, our researchers discovered the torggissoft[.]com rogue page. It promotes deceptive content and spam browser notifications. Additionally, this webpage can redirect visitors to different (likely unreliable/hazardous) sites. Most users enter torggissoft[.]
News-hexuma[.]com is a rogue webpage that we discovered while inspecting rogue sites. It is designed to endorse browser notification spam and redirect visitors to other (likely unreliable/harmful) websites. Users typically enter pages like news-hexuma[.]com through redirects caused by sites using