Homebrew 7 Adds Built-In Checks: Read the Skipped Packages
Homebrew 7 adds built-in vulnerability checks for Mac and Linux. Learn what skipped packages mean and where tap trust and installation sandboxing stop.
Gridinsoft security desk
Security Blog
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
Carnival’s Real Booking Email Led to Malware Through an Expired Domain
A genuine Carnival booking email led to deceptive downloads through a lapsed domain. A new report traces the…
StyleSmuggler: Magento Hotfix Expands, Backdoors Still Need Removal
Adobe expands StyleSmuggler hotfix support. See how a failed-payment email leads to a server backdoor, and why patches…
Guides
View all
SimpleSwap Bonus Script Scam: Remove Malicious Userscripts
Remove a fake SimpleSwap bonus userscript, check browser persistence, and respond safely if a crypto address changed or you already sent funds.
Repair desk
View all
SnakeBiteAgent RAT: Remove Remote Access and Secure Accounts
Check SnakeBiteAgent RAT exposure, remove unauthorized remote access, scan Windows, and secure accounts after running a suspicious ZIP download.
Domain Age of Flagged Online Stores: A Study of 1,000 Records
Gridinsoft studied 1,000 flagged store records. Compare domain ages for new records and updates, with date checks and clear methodological limitations.
How Malware Abused Paste.tc: XWorm, LimeRAT, and AsyncRAT Cases
A cross-case investigation of how AsyncRAT, LimeRAT, and XWorm used Paste.tc raw pages as C2 resolvers…
Plushiefun.xyz PowerShell Chain Found Under HP Task Identities
Gridinsoft Labs observed plushiefun.xyz on nine endpoints where activity under Hewlett-Packard Diagnostics task identities led into…
Planet Search Chrome Extension: Is It Safe and How to Remove It
Planet Search can route Chrome searches through hidden intermediaries to Nextgeeker. Verify its ID, remove it,…
Rotating Names, Stable Loader: A Polymorphic CoinMiner Cluster on Chinese Windows Systems
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed…
OkoBot/TookPS: New C2 and GDrive Backup Sync Task
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Payment to Bank Details DOCX: Broken altChunk Lure Analysis
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Why Antivirus Flags Old Bookmarks and URL Shortcuts
Old Favorites and .url shortcuts can be flagged when saved sites become phishing, scam, or adware…
SF Express E-Invoice HTML Phishing Kit: Technical Analysis
A technical analysis of an SF Express e-invoice HTML attachment that steals email passwords through Telegram…
Latest from every desk
Security News
AI Access Thief Sends 43 KB of Agent Context to a Honeypot
An attacker’s coding agent exposed instructions, keys and history to a research honeypot. How…
Security News
LG TV Privacy: What the Company Says and What to Check
LG disputes TV listening claims. Check optional agreements and voice settings, and understand why…
Security News
Gigabud Uses Vwork to Clone Banking Apps on Android
Gigabud uses Vwork and Android work profiles to separate banking apps from malware. Learn…
Security News
Google Play Early Access: Cash Rewards Without Reviews
Deceptive reward apps can hide behind private Early Access feedback. Check the developer, payout…
Security News
OfferLoader: Fake Installers Can Deliver Several Malware Payloads
A new Unit 42 report links OfferLoader to fake gaming tools and WinDirStat installers.…
Troubleshooting
Microsoft Compatibility Telemetry High CPU: Trace the Appraiser
Microsoft Compatibility Telemetry using high CPU or disk? Check CompatTelRunner, task history, and Windows…
Troubleshooting
WSAPPX High CPU or Disk: Find the Stuck Store App
WSAPPX using high CPU, disk, or memory? Identify a stuck Microsoft Store app, repair…
Troubleshooting
Secure System High Memory: Check VBS Before Disabling It
Secure System using too much RAM? Check the actual memory trend, VBS features, drivers,…
Troubleshooting
System Interrupts High CPU: Find the Driver or Device
Diagnose System Interrupts high CPU on Windows 11. Isolate USB devices, compare driver changes,…
Troubleshooting
AppHostRegistrationVerifier.exe: Check a Firewall Alert
See what AppHostRegistrationVerifier.exe does, verify its Windows signature and network destination, and decide whether…
Security News
BigBear 2.0 Phishing: What to Do After Microsoft 365 MFA
BigBear 2.0 phishing can steal Microsoft 365 sessions after MFA. What to report, how…
Security News
Claude Code Auto Mode: Check What an Approved Command Can Reach
A controlled Opus 5 test turned a website summary into code execution. Review imports,…