aboutlottads.top is a generic deceptive website that tries to trick users into allowing ads on their desktops. When you get redirected to the site, you will immediately get a browser alert saying “aboutlottads.top wants to show notifications”. The site is misusing a legitimate browser feature, and if you click “Allow”, the site will start spamming ads on your desktop. Legitimate…
The “Your Shipment With DHL Express Is On Its Way” email is part of a phishing email campaign that intends to steal users’ email login credentials. The email is disguised as a parcel delivery notification from DHL and claims that the recipient has a delivery on its way. The email has an attachment that supposedly contains the tracking number, and if…
SteelFox trojan is a malicious infection with a large range of features. Specifically, it’s a malicious bundle that contains a dropper, a loader, a miner, and a stealer infection. Users’ computers get infected primarily via popular software cracks, which users download via torrents, forums, and blogs. The malware operates as a miner and uses the device’s resources to mine for…
WezRat malware is a stealer trojan, a dangerous infection that aims to steal highly sensitive information from infected devices. The trojan has a wide range of capabilities, including data theft, keylogging, command execution, file upload, screenshot capture, and more. The malware is distributed through phishing emails urging users to update their Chrome browsers.
…
ACMA ransomware refers to a screen-locker ransomware that locks users’ screens and displays a fake law enforcement message. In this particular case, the screen locker message is supposedly shown by the Australian Communications and Media Authority (ACMA), Australian Federal Police (AFP), Australian Crime Commission (ACC), and Royal Australian Corps of Military Police (RACMP). Supposedly, the reason your screen was locked…
Australian Federal Police ransomware is a screen-locker type of ransomware. This particular version targets users in Australia but screen-locker infections show localized screens based on users’ locations. The ransomware locks the screen and displays an image saying users’ computers have been blocked because they’ve violated several laws. To avoid being charged with things like watching/distributing illegal pornography (child abuse, zoophilia),…
bigdatacorps.xyz is a deceptive website that displays a fake virus alert to trick users into either downloading questionable programs or calling fake tech support numbers. The site also prompts the browser to display an alert saying “bigdatacorps.xyz wants to show notifications”, and if you click “Allow”, the site will be permitted to spam ads on your desktop. Those ads may…
Scp ransomware is file-encrypting malware from the Makop ransomware family. The ransomware encrypts target files and demands a payment for their recovery. The malware can be identified by the .[unique ID].[studiocp25@hotmail.com].scp extension added to encrypted files. In addition to encrypting files, the ransomware also claims to have stolen the files and threatens to release them if a payment is not…