Dropbox Lenovo ID Breach: Check Account and File Access
Dropbox says about 5,000 accounts were accessed through Lenovo ID. Check your notice, sessions, connected apps, and the consequences of copied files.
Gridinsoft security desk
Security Blog
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
Claude Sessions Stolen by Infostealers Drain Usage
Anthropic warns that infostealers are stealing Claude sessions and draining usage. Learn how to revoke access, clean the…
McKesson Data Breach: What Is Confirmed So Far
McKesson confirms data theft tied to a subset of Oncology & Multispecialty and Medical-Surgical customers. See what is…
Guides
View all
Is KissCartoon Safe? KimCartoon Clones and Cleanup
Is KissCartoon safe? Learn how to spot unverified KimCartoon clones, stop pop-ups and notifications, protect accounts, and clean downloads.
Repair desk
View all
Is AtlasOS Safe? Defender, Updates, and Recovery
Is AtlasOS safe? Compare current and legacy security defaults, verify Defender, updates and Core Isolation, measure gaming gains, and recover safely.
How Malware Abused Paste.tc: XWorm, LimeRAT, and AsyncRAT Cases
A cross-case investigation of how AsyncRAT, LimeRAT, and XWorm used Paste.tc raw pages as C2 resolvers or PowerShell stages, with behavioral hunts and careful attribution boundaries.
Plushiefun.xyz PowerShell Chain Found Under HP Task Identities
Gridinsoft Labs observed plushiefun.xyz on nine endpoints where activity under Hewlett-Packard Diagnostics task identities led into…
Planet Search Chrome Extension: Is It Safe and How to Remove It
Planet Search can route Chrome searches through hidden intermediaries to Nextgeeker. Verify its ID, remove it,…
Rotating Names, Stable Loader: A Polymorphic CoinMiner Cluster on Chinese Windows Systems
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed…
OkoBot/TookPS: New C2 and GDrive Backup Sync Task
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Payment to Bank Details DOCX: Broken altChunk Lure Analysis
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Why Antivirus Flags Old Bookmarks and URL Shortcuts
Old Favorites and .url shortcuts can be flagged when saved sites become phishing, scam, or adware…
SF Express E-Invoice HTML Phishing Kit: Technical Analysis
A technical analysis of an SF Express e-invoice HTML attachment that steals email passwords through Telegram…
Runechat.com Scam: RuneScape Casino Phishing Warning
Runechat.com is flagged as phishing with a 3/100 trust score. Learn why not to log in,…
Latest from every desk
Troubleshooting
Microsoft.Photos.exe High Memory: Fix Windows Photos
Microsoft.Photos.exe using too much RAM? Verify the Photos process, isolate the trigger, then update,…
Troubleshooting
GameBar.exe Not Opening: Repair, Disable, or Reinstall
GameBar.exe runs but Xbox Game Bar will not open or record? Fix shortcuts, repair…
Troubleshooting
SearchFilterHost.exe High CPU or Crashing: Fix Event 10024
Fix SearchFilterHost.exe high CPU, repeated crashes, and Event 10024 by isolating a bad file…
Troubleshooting
Widgets.exe System Error: Fix Windows 11 Widgets
Fix Widgets.exe system errors, unknown hard errors, blank panels, and missing Windows 11 Widgets…
Troubleshooting
SearchProtocolHost.exe Application Error: Fix Crashes and High CPU
Fix SearchProtocolHost.exe application errors, crash loops, unknown hard errors, and high CPU by checking…
Troubleshooting
AvastSvc.exe High CPU or Disk: Safe Fixes for Avast Service
AvastSvc.exe using high CPU, disk, or memory? Check whether Avast is scanning, verify the…
Troubleshooting
Is Winhance Safe? Security Settings and Rollback Risks
Is Winhance safe? Verify the official download, review VBS, Memory Integrity, Smart App Control…
Troubleshooting
Explorer.exe High CPU in Windows 11: Find the Trigger
Explorer.exe using high CPU? Restart it safely, reproduce the trigger, isolate folders or shell…
Troubleshooting
SystemSettings.exe Crash or System Error: Windows 11 Fixes
SystemSettings.exe crashing or flashing closed? Separate normal suspension from errors, check the fault, reset…
Troubleshooting
OneDrive High CPU or Memory: Fix Stuck Sync Safely
OneDrive using high CPU or memory? Prove the sync loop, check folders and Files…
Security News
.vu Phishing Surge Uses 1,660 Domains to Steal Accounts
A .vu phishing operation used 1,660 short-lived domains and AiTM login relays. Learn the…
Security News
Carhartt Data Breach Exposes 12.9 Million Accounts
The validated Carhartt breach contains 12.9 million accounts with names, emails, phone numbers, and…