SkyWard is a rogue app that our researchers discovered while inspecting new submissions to VirusTotal. After analyzing this piece of software, we learned that it operates as adware and belongs to the AdLoad malware family. Adware may require certain conditions to run intrusive advertisem
Non is the name of a ransomware-type program that our research team discovered while looking through new submissions to VirusTotal. We determined that this piece of malicious software is part of the Phobos ransomware family. After executing a sample of Non (Phobos) ransomware on our test system,
Ultimate Video Adblocker is a rogue browser extension that our research team discovered while inspecting deceptive download webpages. This piece of software is promoted as an ad-blocking tool capable of eliminating advertisements on YouTube and other popular video-hosting platforms. Instead, our
We discovered the situationalawareness[.]sbs rogue webpage while inspecting untrustworthy sites. It operates by loading scams, promoting browser notification spam, and redirecting visitors to other (likely unreliable/malicious) websites. Users typically access such pages through sites that use rog
Simple Files Downloader is a rogue browser extension promising to operate as a download management tool. Our researchers discovered it while inspecting dubious download webpages. After analyzing this extension, we determined that Simple Files Downloader is advertising-supported software (adware).
"Win SAMSUNG GALAXY S22" is a scam our researchers found while checking out untrustworthy sites. This phishing scam aims to entice victims into providing personally identifiable information by claiming that by doing so - they have a chance to win a Samsung Galaxy product. This scam states
While inspecting rogue websites, our researchers discovered "McAfee - Act Now To Keep Your Computer Protected". Our inspection of this online content revealed that it is a scam intended to trick visitors into downloading/installing and/or purchasing software. It must be emphasized that this scam
Our research team discovered the Sheeva ransomware during a routine inspection of new malware submissions to VirusTotal. When we executed a sample of Sheeva on our test machine, it encrypted files and changed their filenames. Affected files were renamed according to this pattern - "id[victim's_ID
While inspecting questionable websites, our research team discovered the hexaput0n[.]click page. It operates by running scams, promoting browser notification spam, and redirecting visitors to different (likely untrustworthy/dangerous) sites. Users typically enter these webpages through redirects c
DimScreen is a rogue browser extension that our researchers found while inspecting dubious download webpages. It is endorsed as a tool capable of enabling dark mode for simple-design websites. After analyzing this piece of software, we determined that DimScreen operates as adware. Adware e