STEEL Ransomware is a New Phobos Variant
We recently discovered a new ransomware variant belonging to the Phobos family called STEEL. This malicious software encrypts files and adds a unique ID, an email address (codeofhonor@tuta.io), and the ".STEEL"... Read more
'TROJAN_2022 And Other Viruses Detected' Scam
We uncovered a scam known as the "TROJAN_2022 And Other Viruses Detected" while inspecting sites that promote rogue advertising networks. This fake content claims that the visitor's device is infected with multiple... Read more
Aavpolse.xyz Uses Fake Virus Warnings to Push Ads
Our researchers recently uncovered a rogue page known as Aavpolse.xyz. This webpage is designed to promote scams, push browser notifications, and redirect users to other potentially malicious websites. It is believed... Read more
Pouu Ransomware is a New Djvu Clone
Pouu is a type of ransomware that belongs to the Djvu family. It encrypts data and adds the ".pouu" extension to filenames, as well as creating a "_readme.txt" file with instructions for victims. Our malware... Read more
Word Counter Widget Rogue Extension
Our team has conducted an investigation into the Word Counter Widget browser extension and found it to be displaying intrusive ads. As a result, we have classified it as adware. This type of software is often... Read more
Rhadamanthys Stealer Abuses Google Ads to Deliver Payload
Rhadamanthys, a malicious software designed to steal data such as passwords and email addresses, is now being advertised on Google ads. It is also targeting cryptocurrency wallet credentials and is being marketed as... Read more
VectorStealer Malware Can Exfiltrate Sensitive Data
VectorStealer is a type of malicious software that is used to steal sensitive data without the user's knowledge. It is classified as an information stealer and can be used to extract login details, credit card... Read more
What is the Tzw Ransomware?
Tzw is a ransomware-type program that was discovered by researchers while inspecting new submissions to online virus databases. When executed, it encrypts files and changes their titles, adding the ".tzw" extension. A... Read more
What is Fake News and How Can You Avoid It?
Fake news is a term used to describe false, misleading or unreliable information circulated on the internet. It has become increasingly prominent in recent years with the rise of digital media and the prevalence of... Read more
Website Screen Protection Rogue Extension
Website Screen Protection is a rogue browser extension, which is advertised as a parental control tool for manually blocking websites. However, a more detailed look into it shows that this extension actually functions... Read more
What is the Poqw Ransomware?
Poqw is a type of ransomware that encrypts files and adds the extension ".poqw" to the filenames. It was discovered while analyzing malware samples submitted to online threat databases. Poqw may be bundled together... Read more
Nyx Ransomware Lists No Ransom Sum
Nyx ransomware is a malicious software that encrypts files and appends the victim's ID, an email address, and the ".NYX" extension to filenames. It also drops a "READ_ME.txt" file with instructions on how to restore... Read more
