Ngexcellern.xyz is a generic scam website that misuses a legitimate browser feature to trick users into allowing notifications on the desktop. As soon as you visit the site, you will get a browser alert saying “Ngexcellern.xyz wants to show notifications”. Normally, legitimate sites would show useful content but sites like Ngexcellern.xyz show ads. Furthermore, a lot of the ads could expose…
Vtym ransomware is file-encrypting malware from the Djvu/STOP ransomware family. The majority of ransomware versions from this malware family are more or less identical, though they can be differentiated by the extensions added to encrypted files. This ransomware adds .vtym, hence why it’s known as Vtym ransomware. Unfortunately, you will not be able to open any files with this extension unless…
“Access to this PC has been blocked for illegal activities” is a fake alert that incorrectly claims that a computer has been blocked. Because it displays a fake Microsoft technical support number, it’s classified as a tech-support scam. It’s a fairly typical scam that tries to trick users into thinking there’s something seriously wrong with their computers so scammers can…
Rplnd25.com is a generic website that promotes various scams. In addition to currently promoting a fake gift card giveaway, the site is also misusing a legitimate browser notification that allows sites to ask for permission to show notifications on the desktop. As soon as you enter the site, you will see a browser alert saying “Rplnd25.com wants to show notifications”.…
Deretikijob.xyz is a generic scam website, one of the thousands that misuse a legitimate browser feature in order to spam users with ads. Browsers have a feature that allows websites with users’ permission to show push notifications on the desktop. However, scam websites like Deretikijob.xyz misuse this feature to show users questionable, even potentially dangerous ads, on the desktop. If you…
Qbaa ransomware is a very generic file-encrypting malware infection, released by the same cybercrime gang operating the Djvu/STOP ransomware family. Qbaa ransomware is essentially identical to all other versions from the Djvu malware family. But you can recognize which version you’re dealing with by the extension added to encrypted files. If you cannot open your files and they have .qbaa added…
Orkhovdi.xyz is one of many highly questionable websites that push a social engineering scam to trick users into allowing advertisements on the desktop. In order to do that, the site is misusing a legitimate browser feature that allows sites with permission to show push notifications that appear on the desktop. Only instead of useful content, sites like Orkhovdi.xyz start spamming users…
“Your Password Expires Today” email is a fake warning email sent by malicious actors to phish personal information/login credentials and/or trick users into downloading malicious software. The email is disguised to look like it’s sent by Microsoft to warn about your account closing if you do not validate it. It’s a very common type of scam that either intends to…