Trojan:Script/Phonzy.A!ml and B!ml: False Positive or Malware?
Trojan:Script/Phonzy.A!ml and B!ml are Microsoft Defender script detections. Check the affected path, archive source, false-positive signs, and safe cleanup steps.
Threat research notebook
Gridinsoft Security Lab
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
291 lab recordsTax Season Scams On The Rise, Beware!
Tax season has already begun, and so did tax season scams. The IRS annually lists its...
Mispadu Banking Trojan Exploits SmartScreen Flaw
Recent research uncovers a new sample of Mispadu malware that uses a SmartScreen bypass flaw to...
CrackedCantil Dropper Delivers Numerous Malware
CrackedCantil is a unique dropper malware sample that operates with a wide variety of malware families....
Research log
What Is a Bootkit? Boot Malware, Symptoms, and Protection
A bootkit is malware that infects the boot process so it can run before or during the operating system startup. Because it starts so...
TikTok Shopping Scams On The Rise: Tips to Avoid
TikTok shopping scams is a new attack vector on online shoppers. Immense popularity of the Chinese social network led to addition of shopping functionality...
Types of Malware: 13 Common Examples, Signs, and Prevention
Learn 13 common types of malware, how viruses, worms, Trojans, ransomware, spyware, adware, rootkits, loaders, and stealers work, and what to do first.
PUABundler:Win32/PiriformBundler Removal
PUABundler:Win32/PiriformBundler is a Microsoft Defender PUA detection for Piriform-related installers that include bundled offers or behaviors Microsoft classifies as potentially unwanted. It does not...
Novice Rugmi Loader Delivers Various Spyware
The threat landscape meets a new player - Rugmi Loader. This threat specializes in spreading spyware, and is in fact capable of delivering any...
What is Sextortion? Explanation, Signs & Ways to Avoid
Sextortion is a specific email phishing tactic that was around for quite some time. Over the last few years though its popularity skyrocketed, and...
Rude Stealer Targets Data from Gamer Platforms
A newly discovered Java-based stealer named Rude has emerged, encapsulated within a Java Archive (JAR) file. It employs a range of sophisticated functionalities and...
Microsoft Security Warning Scam: Fake Alert Removal
A Microsoft Security Warning pop-up with a phone number is browser scareware, not a real Defender alert. Close it safely, remove notification spam, and...
Android:TrojanSMS-PA Google App Warning: False Positive or Malware?
Huawei, Honor, or Vivo phone says the Google app or Google Play Services is Android:TrojanSMS-PA? Learn when it is a false positive and when...
WinRAR Vulnerability Allows Arbitrary Code Execution
Over the past few weeks, Google's Threat Analysis Group (TAG) has reported a worrying trend. Experts have observed government-sponsored actors from different nations exploiting...
TOP 10 Most Dangerous Computer Viruses In History
Computer viruses really resemble real ones. They can infect thousands of computers in a matter of minutes, which is why we call their outbreak...
Aluc Service and Aluc App: What They Are and How to Remove Them
Aluc Service and Aluc App are names users report seeing in Task Manager, Services, or installed apps when a suspicious program is active on...
Exim Vulnerability Allows RCE, No Patches Available
Exim Internet Mailer, a program massively used as a basis for mailing servers, appears to have a remote code execution vulnerability. By overflowing the...
Redline and Vidar Stealers Switch to Ransomware Delivery
Cybercriminals who stand behind RedLine and Vidar stealers decided to diversify their activity. Now, crooks deploy ransomware, using the same spreading techniques as they...
GridinSoft Launches Own Online Scanner Service – Meet Online Virus Scanner
As a part of the GridinSoft team, I am proud to announce the public release of our own online virus scanner service! Now, you...
W3LL Targets Microsoft 365 Accounts with Sophisticated Phishing Kit
In the ever-evolving landscape of cyber threats, crooks continually find new and inventive ways to exploit vulnerabilities and target valuable assets. One such threat...