Black (Prince) ransomware, or .black virus, is a type of malware that encrypts files. These types of infections take files hostage by encrypting them and demanding a payment for their recovery. The ransomware targets all personal files, encrypts them, and adds the .black extension to them. The ransomware operators will offer you a decryptor, though the price is not specified. Whatever…
Cdtt ransomware, or .cdtt virus, is ransomware from the Djvu malware family. It’s a type of malware that takes users’ personal files hostage and demands payment if victims want to recover them. This specific ransomware can be identified by the .cdtt extension that gets added to all encrypted files. Unfortunately, you will not be able to open any files that…
The “Binance Airdrop” scam refers to a fake Binance airdrop hosted on claimairdrop-reflection.xyz. It goes without saying that the scam has nothing to do with Binance Holdings, the cryptocurrency exchange platform. Malicious actors are merely using the platform’s popularity to steal users’ money. The fake site invites users to claim the airdrop and asks them to connect their digital wallets. If…
revupdevice.co.in is a deceptive website that tries to trick users into allowing ads on the desktop by misusing a legitimate browser feature. The feature allows sites to request permission from users to show notifications on users’ desktops. Legitimate sites show the content they post in these notifications. It serves to allow users to quickly access new content from sites they…
cactrops.com is a scam site whose sole purpose is to trick users into allowing desktop ads. The site is completely empty, save for a fake video player that stops playing after around 10 seconds. The site misuses a legitimate browser feature that allows sites with permission to show notifications on users’ desktops. Sites like cactrops.com misuse the feature to spam advertisements…
The “Online Webmail Deactivation” email is part of a phishing campaign that targets users’ email login credentials. It’s a generic phishing attempt, disguised as an email from the email service provider, supposedly informing recipients that an unusual login has triggered the email account to be temporarily blocked for security reasons. Users will supposedly be unable to use their accounts unless they…
The “European Data Protection Supervisor” email is a fake email from supposedly the European Data Protection Supervisor. The email has a file attached to it that claims an investigation by Europol has been launched against the recipient, supposedly because of “potential illegal activities involving the use of computer networks”. Specifically, illegal activities involving possession and dissemination of child abuse material, and…
StarFire ransomware is a file-encrypting malware. The ransomware takes users’ files hostage by encrypting them and demands payment for a decryptor to recover them. The malware can be identified by the .Celestial extension added to encrypted files. If your files have that extension, you will not be able to open them until you put them through a decryptor. However, the…