If swsrc4you.com loads every time you open your browser, your computer is likely infected with a browser hijacker. Browser hijackers are not a serious infection, but they do cause issues as they change browsers’ settings. In this particular case, the hijacker will set swsrc4you.com as your homepage/new tabs. The hijacker is also promoting a fake search engine that does not work and…
There is currently an Onyx Goliath Staking crypto scam going around, trying to trick users into connecting their crypto wallets to a fraudulent site that activates a crypto drainer that steals all funds in the wallet. The scam is hosted on onyx-migration.com, a nearly identical site to onyx.org, the legitimate site for the Onyx blockchain platform. The Onyx platform is in…
quicknetshift.co.in is a deceptive website, identical to thousands of other sites that all aim to trick users into allowing desktop ads. A legitimate browser feature is misused for this, which is why if you click “Allow” on the “quicknetshift.co.in wants to show notifications” alert, the site will be authorized to show ads on your desktop. The feature does have its…
The “SingularityNET (AGIX) Airdrop” scam is hosted on agix-finance.com, and it promotes a fake crypto giveaway. The site tries to trick users into connecting their crypto wallets so a crypto drainer could be activated to steal all funds in the wallets. SingularityNET is a legitimate platform, but it has nothing to do with this scam. Malicious actors have merely created a…
The “Capital One – Unlock Your Account Access” email is part of a phishing campaign that targets Capital One customers. The email tries to steal users’ Capital One online bank login credentials by trying to trick them into typing them on a phishing site. The email is disguised as a notification from Capital One, informing users about an issue with a…
The “Mailbox Storage Notification” email is a phishing attempt that intends to steal users’ email login credentials. The email falsely informs recipients that their mailbox storage is approaching its limit, as 85% of its capacity has been filled. Recipients are warned that if they do not free up storage, they may become unable to send or receive new emails. The email…
The “Unsuccessful Mail Delivery Report” email is part of a phishing campaign that tries to steal users’ email login credentials. The email is disguised as a notification, supposedly informing users about some of their emails not being delivered due to low bandwidth. The email suggests that users release the emails by clicking on the provided button. However, users who interact…
Govcrypt ransomware is a file-encrypting malware based on the Chaos ransomware. The ransomware targets personal files and makes them unopenable by encrypting them. The ransomware can be identified by the .govcrypt extension added to encrypted files. Files with that extension will be unopenable unless you first put them through a decryptor. However, acquiring the decryptor will not be easy, as…