Gridinsoft security desk
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
BlackFog analyzed MedusaHVNC, a Windows RAT that opens a browser on an invisible desktop and can use existing logged-in sessions. Check the five-stage chain, concrete artifacts, and the right cleanup order.
Laser Tag Neon in Meccha Chameleon writes a batch file and attempts a hidden PowerShell download. See what…
Varonis analyzed the Dolphin X operator panel, which targets browser, wallet, SSH, cloud, and developer secrets and includes…
The original Soap2Day closed in 2023. Learn how to judge current clones and respond after redirects, notifications, downloads, installs, logins, or payment…
Polyglow.cc is too risky to trust with funds, wallet approvals, credentials, or ID until its operator and license can be verified independently.
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed launcher abuse, and fake SecurityHealth persistence.
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Old Favorites and .url shortcuts can be flagged when saved sites become phishing, scam, or adware…
A technical analysis of an SF Express e-invoice HTML attachment that steals email passwords through Telegram…
Runechat.com is flagged as phishing with a 3/100 trust score. Learn why not to log in,…
Is Echo.ac malware? Learn when Echo Anti-Cheat is legitimate, why echo_driver.sys needs verification, and what to…
SocGholish, also called FakeUpdates, uses fake browser update prompts on compromised sites. Learn what to do…
Learn what Trojan.Malware.300983.susgen means in VirusTotal results, when it is likely a false positive, and when…
Troubleshooting
MuseHub is legitimate when the installer and signer match. Verify the app, remove it…
Tips & Tricks
Understand what a checked SolarMovie domain report does and does not prove, then stop…
Tips & Tricks
Find-it.pro opening on every new tab points to a browser setting, extension, policy, synced…
Tips & Tricks
Is Eporner safe? Check the current domain verdict, spot fake Eporner sites, judge video…
Tips & Tricks
Is FapHouse safe? Check the current domain verdict, fake download and APK risks, billing…
Troubleshooting
Malwarebytes keeps blocking exo-api.tf from msedge.exe? Learn what the alert means, isolate the Edge…
Tips & Tricks
Learn why an SFlix name or clean URL scan is not a safety guarantee,…
Troubleshooting
MarkiRAT hides in fake VPN and media-player installers. Check svehost.exe, BITS jobs, startup persistence,…
Troubleshooting
ClickLock keeps closing Mac apps and demanding a password. Regain control, check LaunchAgents and…
Security News
Cisco Talos found a Rust backdoor that starts a hidden Chrome or Edge process…
Security News
A current TrickBot variant hides C2 data in DNS queries and persists through a…
Troubleshooting
Online-fix.me warnings are not a file verdict. Separate a visit, download, or executed fix,…
