AWS Kiro Flaw Turned Hidden Web Text Into Code Execution
AWS patched a Kiro IDE flaw that let hidden web text rewrite mcp.json and run commands without approval. Update Kiro and check MCP configurations now.
Gridinsoft security desk
Security Blog
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
ACR Stealer ClickFix Attacks: What to Check After Running the Command
Microsoft tracked ACR Stealer ClickFix chains using WebDAV, MSHTA and PowerShell. Check scheduled tasks, browser sessions, exposed passwords…
Spirals Ransomware Encrypts Networks in Under 24 Hours
Symantec documented a Spirals ransomware attack that moved from an exposed IIS server to network-wide encryption in under…
Guides
View all
Cloudbeds Payment Details Email Scam: Verify the Reservation
Received a Cloudbeds Payment Details email for CB-72298729? See the red flags, verify the reservation safely, and secure the account after a…
Repair desk
View all
Is TLauncher Safe? Virus, PUP, and Removal Guide
TLauncher is not automatically malware, but safety depends on the exact source, signature, hash, bundles, and behavior. Check it and remove leftovers…
Rotating Names, Stable Loader: A Polymorphic CoinMiner Cluster on Chinese Windows Systems
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed launcher abuse, and fake SecurityHealth persistence.
OkoBot/TookPS: New C2 and GDrive Backup Sync Task
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Payment to Bank Details DOCX: Broken altChunk Lure Analysis
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Why Antivirus Flags Old Bookmarks and URL Shortcuts
Old Favorites and .url shortcuts can be flagged when saved sites become phishing, scam, or adware…
SF Express E-Invoice HTML Phishing Kit: Technical Analysis
A technical analysis of an SF Express e-invoice HTML attachment that steals email passwords through Telegram…
Runechat.com Scam: RuneScape Casino Phishing Warning
Runechat.com is flagged as phishing with a 3/100 trust score. Learn why not to log in,…
Echo.ac Malware? Echo Anti-Cheat and echo_driver.sys Safety Check
Is Echo.ac malware? Learn when Echo Anti-Cheat is legitimate, why echo_driver.sys needs verification, and what to…
SocGholish Malware: Fake Update Removal Guide
SocGholish, also called FakeUpdates, uses fake browser update prompts on compromised sites. Learn what to do…
Trojan.Malware.300983.susgen
Learn what Trojan.Malware.300983.susgen means in VirusTotal results, when it is likely a false positive, and when…
Latest from every desk
Troubleshooting
JxrDecApp.exe Virus Alert: Is the File Safe?
JxrDecApp.exe is usually a jxrlib JPEG XR decoder, but the filename alone cannot prove…
Troubleshooting
KB5101650 Problems: BSOD, Shutdowns, and Install Failures
KB5121767 resolves the Dell Intel IPF hold linked to KB5101650. See who should install…
Tips & Tricks
Is AcerMovies Safe? Acermovies.fun Malware Risks and Cleanup
Acermovies.fun has multiple current provider warnings. Learn what that means and what to do…
Tips & Tricks
Is XNXX Safe? Pop-Ups, Fake Sites, and What to Do After a Click
Is XNXX safe? Learn what a domain check can prove, why redirects and fake…
Troubleshooting
Google “Signed Out for Your Protection” Warning: What to Do
Google signed you out and mentioned malware? Verify the warning, secure the account from…
Troubleshooting
SteamUnlocked Virus Removal: What to Do After a Download
Downloaded or ran a SteamUnlocked game? Match the cleanup to what happened, remove the…
Tips & Tricks
Fake Domain Renewal Email Scam: Check Before You Pay
A fake domain renewal email may use your real name and domain while sending…
Mobile Security
Marowhome.com Redirect on Infinix, Tecno, and itel: What to Do
Marowhome.com opens by itself on an Infinix, Tecno, or itel phone? See what is…
Troubleshooting
Windows Script Host “Can Not Find Script File” at Startup: Fix
Fix a Windows Script Host missing-file popup by tracing the startup entry or scheduled…
Troubleshooting
Microsoft Defender Offline Scan Not Working: No Restart or No Results
Fix a Microsoft Defender Offline scan that does not start, only restarts Windows, or…
Troubleshooting
“Operation Did Not Complete Successfully Because the File Contains a Virus or Potentially Unwanted Software”: Safe Fix
Error 225 or 0x800700E1 means Windows blocked a file as malware or potentially unwanted…
Troubleshooting
Proxy Server Keeps Turning On in Windows 11: Find What Enables It
Windows 11 proxy settings keep changing back? Trace Settings, WinHTTP, PAC/WPAD, policy, the listening…