Devill is ransomware that we discovered while examining new file submissions to the VirusTotal website. It encrypts files, appends a randomly generated five-character extension to their filenames, changes the desktop wallpaper, and creates a text-file ransom note named Readme.txt. On our test mac
InterServer is ransomware our research team identified during a routine inspection of samples submitted to VirusTotal. It encrypts files, appends a variant-specific extension (e.g., .interserver12), and creates an HTML ransom note named RANSOM_NOTE.html. The attackers also claim to have stolen sen
Dolphin X RAT is a multi-purpose Windows malware sold as a subscription service to cybercriminals. It combines a Remote Access Trojan (RAT), information stealer, cryptocurrency clipper, and distributed denial-of-service (DDoS) tool in a single package. Research published by Varonis Threat Labs do
NoMatter is ransomware discovered by our researchers during a routine inspection of new submissions to VirusTotal. It encrypts victims' files, changes the desktop wallpaper, and drops a ransom note in a text file named README.txt. Unlike most ransomware, NoMatter does not append any new extension
BlackWizard is ransomware that our researchers discovered during a routine inspection of new file submissions to VirusTotal. It encrypts victims' files and demands payment in exchange for a decryption key. The group behind it identifies themselves as "Ransomware Team" in the ransom message. On ou
We have inspected the website fomoo[.]family and found that it copies the design of the legitimate Fomo trading platform (fomo.family) almost exactly. The page is built to trick visitors into connecting their cryptocurrency wallets, which can result in the theft of their digital assets. IMPO
During our examination of vote-firelightfoundations[.]xyz, we found that this page promotes a fake voting rewards program. It impersonates the legitimate Firelight platform (firelight.finance) and operates as a cryptocurrency drainer designed to steal digital assets from visitors. IMPORTANT
Key word search is a browser hijacker promoting the keysearchs.com fake search engine. Since most users inadvertently download browser hijackers, they are also classified as PUAs (Potentially Unwanted Applications). Browser hijackers assign fake web searcher addresses as browsers' homepage
We have examined this email and concluded that it is a scam. The message impersonates the United States Department of Commerce and falsely claims the recipient has been nominated for the Trump Gold Card selection program. The goal is to trick unsuspecting recipients into paying upfront fees and do
D7k is ransomware designed to encrypt data on infected devices and append the ".D7k" extension to the filenames of all encrypted files. Additionally, D7k creates a text file named "note.txt". This file contains a ransom note. An example of how D7k renames files: it changes "1.jpg" to "1.jpg.D7k",
Security researchers have identified a new Windows-based malware strain called Dolphin X that combines the credential-stealing capabilities of a traditional infostealer with an artificial-intelligence-driven feature designed to help criminals decide which infected computers are worth attacking first
For years, macOS users have enjoyed a reputation for being less attractive targets than their Windows counterparts. While that perception has always been somewhat exaggerated, attackers traditionally invested more heavily in Windows malware because of its larger market share and greater return on in
For years, the cybersecurity industry has debated whether artificial intelligence would fundamentally change offensive cyber operations or simply make existing attackers more productive. Early evidence suggested the latter. Large language models accelerated research, generated scripts, translated ph
Android banking malware has evolved from simple credential-stealing applications into sophisticated remote access platforms capable of persistent device control. The latest version of RedHook shows how quickly mobile threat actors continue to innovate. Rather than relying solely on traditional Andr
For years, cybersecurity strategies have focused on protecting endpoints, identities, and cloud workloads. Yet a growing body of evidence suggests that another critical component of enterprise infrastructure has quietly become one of the most attractive initial access vectors for sophisticated threa
Combo Cleaner is an all-in-one solution developed by RCS LT, the company behind PCrisk.com. Making a powerful entrance as a comprehensive antivirus and system optimization solution, it's here to shield you from various threats on Windows, macOS, Android, and iOS.
When assessing the best way to reclaim your privacy, the personal data removal service Incogni is a popular option. It works by automatically sending requests to data brokers and people-search websites, erasing personal information from their databases.
Launched in 2010 by the privacy company Abine and based in the U.S., DeleteMe has over a decade of experience in cleaning up personal information from the web. This review examines DeleteMe's pricing, features, performance, and value.
Optery stands out as the most flexible personal data removal service. Optery may not be overflowing with the advanced features of more expensive services, but it's getting the results done, and lets you only pay for the level of security you require.
When it comes to Privacy Bee, a privacy protection service that scrubs your personal information from data broker databases and public listings, this review, written by the PCrisk team, will be a solid reference.