SEGA Newsletter Breach Exposes 2.2 Million Email Addresses
SEGA says 11 newsletters were affected by the ARARA breach. Check the mailing dates and see what the disclosure says about SEGA Account.
Gridinsoft security desk
Security Blog
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
ChatGPT Lockdown Mode Bypass Through HTML Previews Was Fixed
Check Point showed how an HTML preview escaped ChatGPT Lockdown Mode. OpenAI fixed the flaw in September. Here…
NIKKE Launcher Cleanup Can Erase Compromise Evidence
NIKKE players should save launcher logs before cleanup. Independent research separates evidence of agent execution from unproven credential…
Guides
View all
Is Stremio Safe? Apps, Add-ons, and Security Warnings
Check Stremio’s app source, add-on URLs, API keys and security alerts. Learn when to remove an add-on, revoke a key or scan…
Repair desk
View all
SmartScreen Can’t Be Reached Right Now: What to Check Before Running an App
SmartScreen unavailable when opening an installer? Check the connection and the file separately, and learn when to retry or ask IT for…
Trojan:Win32/Sabsik.EN.B!ml: Removal and False Positive Checks
Understand the exact Sabsik EN.B Defender alert, keep suspicious files quarantined, and use Gridinsoft Anti-Malware to investigate repeat detections.
Trojan:MSIL/Jalapeno!MTB: Removal and False-Positive Checks
Check Trojan:MSIL/Jalapeno!MTB by its file path and quarantine status. Separate browser-cache alerts from an installer that…
Domain Age of Flagged Online Stores: A Study of 1,000 Records
Gridinsoft studied 1,000 flagged store records. Compare domain ages for new records and updates, with date…
How Malware Abused Paste.tc: XWorm, LimeRAT, and AsyncRAT Cases
A cross-case investigation of how AsyncRAT, LimeRAT, and XWorm used Paste.tc raw pages as C2 resolvers…
Plushiefun.xyz PowerShell Chain Found Under HP Task Identities
Gridinsoft Labs observed plushiefun.xyz on nine endpoints where activity under Hewlett-Packard Diagnostics task identities led into…
Planet Search Chrome Extension: Is It Safe and How to Remove It
Planet Search can route Chrome searches through hidden intermediaries to Nextgeeker. Verify its ID, remove it,…
Rotating Names, Stable Loader: A Polymorphic CoinMiner Cluster on Chinese Windows Systems
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed…
OkoBot/TookPS: New C2 and GDrive Backup Sync Task
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Payment to Bank Details DOCX: Broken altChunk Lure Analysis
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Latest from every desk
Security News
Microsoft: Email Exceptions Let Detected Spoofing Through
Microsoft’s Q3 report shows how mail exceptions overrode detection. The 63% figure concerns tracked…
Security News
ARTEX AI Agents Steal App-Signing Certificates
Check Point traced ARTEX agents stealing 300+ app-signing certificates. Only three passed validation, while…
Security News
Haiou Turns a Codex Greeting Into a Gateway Ad
Check Point traced persistent gateway ads to Haiou’s global agent instructions. A signed package…
Security News
Sogou Icon Request Hijacked to Deliver DarkVigil
ESET traced DarkVigil delivery to Sogou Input Method’s icon configuration. Windows users need 16.10…
Troubleshooting
KB5127936 Failed to Install? Fix Windows 11 26H2 & 25H2
Fix KB5127936 installation errors on Windows 11 26H2 and 25H2. Choose the right step…
Troubleshooting
Trojan.Spy.Win32 Pop-Up: Fake Alert or Real Infection?
Trojan.Spy.Win32 in a fake Microsoft warning? Close the scam, scan for adware with Gridinsoft,…
Troubleshooting
Cyberpunk 2077 setup.exe: Virus or False Positive?
Cyberpunk 2077 setup.exe flagged as Yomal? Check the exact file, keep uncertain downloads quarantined,…
Troubleshooting
Lifegen.exe: Is LifeGen Safe, and Why Is It Blocked?
Check Lifegen.exe safely: verify the LifeGen download, distinguish a missing EXE from quarantine, and…
Tips & Tricks
Tesla Purchase Order Email Scam: Where the “Download Order” Button Points
A fake Tesla supplier email asks for a quote on order 176629. See where…
Troubleshooting
Neutrino Ransomware: Identify .neutrino Files and Plan Recovery
Recognize .neutrino files and README-RECOVERY.txt, preserve evidence, remove active malware, and check safe recovery…
Security News
PapRAT Campaign Hides Access Behind a File-Open Error
PapRAT research shows why an invitation that fails to open can still leave Windows…
Security News
XCPE Backdoor Came Built Into 1.3 Million TV Boxes
Google disrupted XCPE, a firmware backdoor in TV boxes. Its hidden reinstall mechanism explains…