PE32 Ransomware
PE32 Ransomware is a recently discovered malware strain that encrypts your files and asks for payment to unlock them. Victims can recognize the files by the sample-specific extension (.pe32), with them becoming inaccessible in...
Threat research notebook
Gridinsoft Security Lab
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
307 lab records0.31 BTC SnapeDex.com Scam
SnapeDex.com claims to be a cryptocurrency exchange offering free Bitcoin, but there are significant concerns about...
Trojan:Win32/Wacatac: What It Is and How to Remove It
Trojan:Win32/Wacatac is a Microsoft Defender family label. Learn when Wacatac may be a false positive, how...
D0glun Ransomware: Analysis and Protection Guide
D0glun Ransomware: Technical Analysis and Protection Guide D0glun ransomware emerged in January 2025 as a new...
Research log
GorillaBot: Advanced Mirai Variant Targeting IoT Devices with Enhanced DDoS Capabilities
GorillaBot is a sophisticated botnet malware that has been making headlines for its aggressive DDoS attacks tied to booter-style abuse. Building on the infamous...
0.31 BTC XLord Promo Code
Gotexcoin appears to be a fraudulent cryptocurrency platform that lures users with promises of free Bitcoin, specifically 0.31 BTC XLord promo code, often linked...
FBI Issues Online File Converter Malware Scam Warning
The FBI Denver Field Office has warned about a growing scam involving free online file converter tools, which appears to be a significant cybersecurity...
HackTool:Win64/GameHack!rfn: Virus, False Positive, and Removal
Microsoft Defender found HackTool:Win64/GameHack!rfn? Learn if it is a virus or false positive, when not to restore it, and how to remove game-cheat risks...
StilachiRAT: The Emerging Crypto-Stealing Malware Threat
$34.6 million in cryptocurrency could be at risk from StilachiRAT, a complex remote access trojan first detected by Microsoft Incident Response in November 2024....
Steganography Malware: Can an Image Hide a Virus?
Can a JPG, PNG, WebP, or SVG hide malware? Learn how steganography attacks work, when images are risky, and what to do after opening...
MassJacker Malware
Cybersecurity researchers have found MassJacker, a new, previously undocumented malware. It targets a predominantly freebie-seeking audience, i.e. users of pirated content. MassJacker Malware Targets...
Trojan:Win64/RustyStealer.DSK!MTB
Trojan:Win64/RustyStealer.DSK!MTB is a sophisticated malware designed to infiltrate 64-bit Windows systems, primarily focusing on stealing sensitive information such as login credentials, financial data, and...
TrojanProxy:Win32/Acapaladat.B
TrojanProxy:Win32/Acapaladat.B is a type of malware that hides in free, unauthorized VPN applications, turning infected computers into proxy servers for cybercriminals. This allows attackers...
OneStart.ai Browser Removal Guide
Remove OneStart.ai/OneStart Browser, check onestart.exe startup leftovers, user-profile folders, co-installed PUPs, and scan after reboot.
EpiBrowser (EpiStart)
Should you remove EpiBrowser? You should remove EpiBrowser or EpiStart if it appeared without clear consent, replaced your default browser, redirected searches, or came...
The Alarming Rise of DeepSeek Scams
The release of DeepSeek AI chatbot gave a push for an enormous number of DeepSeek scams that trick users in a variety of shady...
Windows Defender Security Center Scam: Remove the Fake Alert
Windows Defender Security Center scam pop-ups imitate Microsoft alerts and push fake support calls. Learn how to close the page, remove notification spam, and...
Jupiter Airdrop Scam
Jupiter Airdrop scam is an alleged crypto-airdrop campaign that promises free crypto tokens, yet in return only empties users’ crypto wallets. Parasiting on the...
Sync.clearnview.com Virus: What It Means and How to Stop It
Sync.clearnview.com alerts usually point to a browser redirect, notification, extension, or adware issue. Learn the safe cleanup order.
AlrustiqApp.exe Virus (Alrustiq Service)
AlrustiqApp.exe, also shown as Alrustiq Service, can indicate a miner-like unwanted app. Learn what to check in Task Manager, Services, Startup Apps, and how...