Claude Sessions Stolen by Infostealers Drain Usage
Anthropic warns that infostealers are stealing Claude sessions and draining usage. Learn how to revoke access, clean the device, and secure other accounts.
Gridinsoft security desk
Security Blog
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
WatchGuard Fixes 4 Critical Firebox RCE Flaws
WatchGuard fixed four critical Firebox RCE flaws in Fireware 2026.2.2, 12.12.2 and 12.5.20. Check exposure, update, and review…
CVE-2026-53362 Exploited for Linux Container Escape
CVE-2026-53362 is now in CISA KEV after active exploitation. Learn which Linux container hosts are exposed, how to…
Guides
View all
Ivyof.com Redirects to Adult Dating Pages: Is It Safe?
Ivyof.com is a bot-aware redirect doorway that can lead to rotating adult-dating pages. See why scanners may show Google and what to…
Repair desk
View all
YourPhone.exe: What It Is, Phone Link, and Safe Disable
See what YourPhone.exe is, where the Microsoft Phone Link file belongs, and how to disable, unlink, Repair, or Reset it safely.
How Malware Abused Paste.tc: XWorm, LimeRAT, and AsyncRAT Cases
A cross-case investigation of how AsyncRAT, LimeRAT, and XWorm used Paste.tc raw pages as C2 resolvers or PowerShell stages, with behavioral hunts and careful attribution boundaries.
Plushiefun.xyz PowerShell Chain Found Under HP Task Identities
Gridinsoft Labs observed plushiefun.xyz on nine endpoints where activity under Hewlett-Packard Diagnostics task identities led into…
Planet Search Chrome Extension: Is It Safe and How to Remove It
Planet Search can route Chrome searches through hidden intermediaries to Nextgeeker. Verify its ID, remove it,…
Rotating Names, Stable Loader: A Polymorphic CoinMiner Cluster on Chinese Windows Systems
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed…
OkoBot/TookPS: New C2 and GDrive Backup Sync Task
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Payment to Bank Details DOCX: Broken altChunk Lure Analysis
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Why Antivirus Flags Old Bookmarks and URL Shortcuts
Old Favorites and .url shortcuts can be flagged when saved sites become phishing, scam, or adware…
SF Express E-Invoice HTML Phishing Kit: Technical Analysis
A technical analysis of an SF Express e-invoice HTML attachment that steals email passwords through Telegram…
Runechat.com Scam: RuneScape Casino Phishing Warning
Runechat.com is flagged as phishing with a 3/100 trust score. Learn why not to log in,…
Latest from every desk
Troubleshooting
Is Winhance Safe? Security Settings and Rollback Risks
Is Winhance safe? Verify the official download, review VBS, Memory Integrity, Smart App Control…
Troubleshooting
Explorer.exe High CPU in Windows 11: Find the Trigger
Explorer.exe using high CPU? Restart it safely, reproduce the trigger, isolate folders or shell…
Troubleshooting
SystemSettings.exe Crash or System Error: Windows 11 Fixes
SystemSettings.exe crashing or flashing closed? Separate normal suspension from errors, check the fault, reset…
Troubleshooting
OneDrive High CPU or Memory: Fix Stuck Sync Safely
OneDrive using high CPU or memory? Prove the sync loop, check folders and Files…
Troubleshooting
ISUSPM.exe: What It Is, Startup Errors, and Safe Removal
ISUSPM.exe is a legacy InstallShield/FlexNet updater helper. Verify its owner, stop startup errors, disable…
Troubleshooting
LockApp.exe High CPU, GPU, or Battery Use: Safe Fixes
LockApp.exe normally shows the Windows lock screen and may be suspended. Fix persistent CPU,…
Troubleshooting
SppExtComObj.exe: Safe KMS Broker or Malware?
SppExtComObj.exe is normally the Windows KMS Connection Broker. Check its path, signature, network activity,…
Troubleshooting
ApplicationFrameHost.exe High CPU: Find the App and Fix It
ApplicationFrameHost.exe is a Windows app host. Find the Store app behind high CPU or…
Troubleshooting
Web Genius UniversalUpdater.exe: Complete Removal Guide
Remove Web Genius Solutions and UniversalUpdater.exe safely. Check the scheduled task, PowerShell script, browser…
Troubleshooting
WSHelper.exe: What It Is and How to Fix Startup Errors
WSHelper.exe is usually a Wondershare helper. Check its path and signature, stop startup errors,…
Troubleshooting
DAX3API.exe: Safe Dolby Service, Errors, and Disable Guide
DAX3API.exe is normally a Dolby audio helper. Fix popup or crash errors, check its…
Troubleshooting
Atieclxx.exe: Safe AMD Process, Errors, and CPU Fix
Atieclxx.exe is usually an AMD driver helper. Check its path and signature, fix application…