Threat research notebook
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
310 lab recordsRecent research uncovers a new sample of Mispadu malware that uses a SmartScreen bypass flaw to integrate itself into the system. This banking trojan from 2019 uses the vulnerability discovered in late 2023 to...
Learn how DLL search order hijacking works, why malicious DLLs load inside trusted Windows processes, and...
Defender flagged PUABundler:Win32/PiriformBundler from a CCleaner/Piriform installer? Remove the bundle, keep only clean apps, and scan...
Win/TrojanDownloader.Rugmi is an ESET loader detection. Learn when quarantine is enough, how to check for secondary...
Got a sextortion email or blackmail threat? Learn how to tell a bluff from real risk, what not to pay, how to secure your...
A newly discovered Java-based stealer named Rude has emerged, encapsulated within a Java Archive (JAR) file. It employs a range of sophisticated functionalities and...
A fake Microsoft Security Warning with a phone number is browser scareware, not a real Microsoft alert. Close it safely, remove notification spam, and...
Huawei, Honor, or Vivo phone says the Google app or Google Play Services is Android:TrojanSMS-PA? Learn when it is a false positive and when...
Over the past few weeks, Google's Threat Analysis Group (TAG) has reported a worrying trend. Experts have observed government-sponsored actors from different nations exploiting...
Computer viruses really resemble real ones. They can infect thousands of computers in a matter of minutes, which is why we call their outbreak...
Aluc Service and Aluc App are names users report seeing in Task Manager, Services, or installed apps when a suspicious program is active on...
Exim Internet Mailer, a program massively used as a basis for mailing servers, appears to have a remote code execution vulnerability. By overflowing the...
Cybercriminals who stand behind RedLine and Vidar stealers decided to diversify their activity. Now, crooks deploy ransomware, using the same spreading techniques as they...
As a part of the GridinSoft team, I am proud to announce the public release of our own online virus scanner service! Now, you...
In the ever-evolving landscape of cyber threats, crooks continually find new and inventive ways to exploit vulnerabilities and target valuable assets. One such threat...
Recent attacks on US military systems and Taiwan companies are distinctive not only by the brave target choosing, but also for the used toolkit....
Threat actors started using compromised websites for phishing purposes much more frequently. Such worrying statistics popped up in several recent researches. This is not...
Think an info-stealer is on your PC? Clean the device, revoke sessions, reset passwords from a trusted device, and secure accounts in the right...
FIN8, an infamous group of cybercriminals, has updated its backdoor malware to avoid being detected. They made improvements and prepared to release a new...
On July 11, 2023, Microsoft published an article about addressing the CVE-2023-36884 vulnerability. This breach allowed for remote code execution in Office and Windows...
