Threat research notebook

Gridinsoft Security Lab

Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.

305 lab records

Field note ·

0.31 BTC XLord Promo Code

Gotexcoin appears to be a fraudulent cryptocurrency platform that lures users with promises of free Bitcoin,...

Research log

05

MassJacker Malware

Record ·

Cybersecurity researchers have found MassJacker, a new, previously undocumented malware. It targets a predominantly freebie-seeking audience, i.e. users of pirated content. MassJacker Malware Targets...

06

Trojan:Win64/RustyStealer.DSK!MTB

Record ·

Trojan:Win64/RustyStealer.DSK!MTB is a sophisticated malware designed to infiltrate 64-bit Windows systems, primarily focusing on stealing sensitive information such as login credentials, financial data, and...

07

TrojanProxy:Win32/Acapaladat.B

Record ·

TrojanProxy:Win32/Acapaladat.B is a type of malware that hides in free, unauthorized VPN applications, turning infected computers into proxy servers for cybercriminals. This allows attackers...

08

OneStart.ai Browser Removal Guide

Record ·

Remove OneStart.ai/OneStart Browser, check onestart.exe startup leftovers, user-profile folders, co-installed PUPs, and scan after reboot.

09

EpiBrowser (EpiStart)

Record ·

Should you remove EpiBrowser? You should remove EpiBrowser or EpiStart if it appeared without clear consent, replaced your default browser, redirected searches, or came...

10

The Alarming Rise of DeepSeek Scams

Record ·

The release of DeepSeek AI chatbot gave a push for an enormous number of DeepSeek scams that trick users in a variety of shady...

12

Jupiter Airdrop Scam

Record ·

Jupiter Airdrop scam is an alleged crypto-airdrop campaign that promises free crypto tokens, yet in return only empties users’ crypto wallets. Parasiting on the...

14

AlrustiqApp.exe Virus (Alrustiq Service)

Record ·

AlrustiqApp.exe, also shown as Alrustiq Service, can indicate a miner-like unwanted app. Learn what to check in Task Manager, Services, Startup Apps, and how...

15

Nnice Ransomware

Record ·

Nnice ransomware is a malware strain that aims at encrypting user files and demanding ransom payment for their decryption. Detected on January 14, 2025,...

AI Assistant

Hello! 👋 How can I help you today?