Cybersecurity news headlines for September 2021

In September’s edition of cybersecurity news, we cover only two stories. The FBI warns that romance and sextortion scams are on the rise, with millions of dollars of reported losses already. And the REvil ransomware gang reappears under the same name after a two-month hiatus following the Kaseya ransomware attack.

Stop Sclotheswe.xyz redirects

Sclotheswe.xyz is a deceptive website that will try to trick you into allowing ads on the desktop. It misuses a legitimate browser feature to do this, which is why you will see a notification saying “Sclotheswe.xyz wants to show notifications” when you visit the site. Infections like adware often redirect to sites like Sclotheswe.xyz so it’s possible your computer is infected…

How to delete JustVideoSearch browser hijacker

JustVideoSearch is a generic browser hijacker infection that makes unwanted changes to the browser’s settings. If justvideosearch.com loads as your homepage every time you open your browser, and all your searches are done via nearbyme.io, you have this browser hijacker installed on your computer. It’s, fortunately, not a serious infection and does not directly harm the computer. It mainly tries to…

Stop Eaconeno.xyz redirects

Eaconeno.xyz is a deceptive entertainment news website that pushes a social engineering scam to trick you into allowing push notifications. When you get redirected to this site, a browser alert will appear saying “Eaconeno.xyz wants to show notifications”. If you press “Allow”, you will start seeing intrusive advertisements on your desktop. The site is essentially misusing a legitimate browser feature…

Delete WebSearchStreams browser hijacker

WebSearchStreams is a browser hijacker that will set websearchstreams.com as your homepage and nearbyme.io as your default search engine. The hijacker will not directly harm your computer so it’s not considered to be a particularly harmful infection. However, in addition to the changes, it will also attempt to redirect you to sponsored websites to generate traffic and revenue. The redirects will…

Remove Thecarriedand.xyz ads

Thecarriedand.xyz is a deceptive website that tries to trick users into allowing advertisements on the desktop. It does that by misusing a legitimate browser feature that allows websites that get permission from users to show push notifications on the desktop. This is why you will see a browser alert saying “Thecarriedand.xyz wants to show notifications” when you visit the site.…

Rigd ransomware removal

Rigd ransomware is file-encrypting malware from the notorious Djvu/STOP ransomware family. This ransomware adds .rigd to encrypted files, hence why it’s known as Rigd ransomware. There currently is no free decryptor available, meaning file recovery without a backup is not possible. The ransomware operators will offer a decryptor to you but it costs $980. And because file recovery is not guaranteed,…