Threat research notebook
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
309 lab recordsThe "0.31 BTC Xprobit ELON31 Promo code" promising 0.31 BTC is a scam, designed to deceive users into depositing funds they cannot withdraw. Xprobit.com, the associated website, shows multiple red flags, which we will...
Defender found Virus:Win64/Expiro.DD!MTB or Virus:Win32/Expiro? Learn how to scan drives, back up safe files, remove leftovers,...
Slopsquatting is a new type of cyber threat that takes advantage of mistakes made by AI...
SnapeDex.com claims to be a cryptocurrency exchange offering free Bitcoin, but there are significant concerns about...
Trojan:Win32/Wacatac is a Microsoft Defender family label. Learn when Wacatac may be a false positive, how to remove it, and what to check if...
D0glun Ransomware: Technical Analysis and Protection Guide D0glun ransomware emerged in January 2025 as a new crypto-ransomware variant with direct links to the Babuk...
GorillaBot is a sophisticated botnet malware that has been making headlines for its aggressive DDoS attacks tied to booter-style abuse. Building on the infamous...
Gotexcoin appears to be a fraudulent cryptocurrency platform that lures users with promises of free Bitcoin, specifically 0.31 BTC XLord promo code, often linked...
The FBI Denver Field Office has warned about a growing scam involving free online file converter tools, which appears to be a significant cybersecurity...
Microsoft Defender found HackTool:Win64/GameHack!rfn? Learn if it is a virus or false positive, when not to restore it, and how to remove game-cheat risks...
$34.6 million in cryptocurrency could be at risk from StilachiRAT, a complex remote access trojan first detected by Microsoft Incident Response in November 2024....
Can a JPG, PNG, WebP, or SVG hide malware? Learn how steganography attacks work, when images are risky, and what to do after opening...
Cybersecurity researchers have found MassJacker, a new, previously undocumented malware. It targets a predominantly freebie-seeking audience, i.e. users of pirated content. MassJacker Malware Targets...
Trojan:Win64/RustyStealer.DSK!MTB is a sophisticated malware designed to infiltrate 64-bit Windows systems, primarily focusing on stealing sensitive information such as login credentials, financial data, and...
TrojanProxy:Win32/Acapaladat.B is a type of malware that hides in free, unauthorized VPN applications, turning infected computers into proxy servers for cybercriminals. This allows attackers...
Remove OneStart.ai/OneStart Browser, check onestart.exe startup leftovers, user-profile folders, co-installed PUPs, and scan after reboot.
Should you remove EpiBrowser? You should remove EpiBrowser or EpiStart if it appeared without clear consent, replaced your default browser, redirected searches, or came...
The release of DeepSeek AI chatbot gave a push for an enormous number of DeepSeek scams that trick users in a variety of shady...
Windows Defender Security Center scam pop-ups imitate Microsoft alerts and push fake support calls. Learn how to close the page, remove notification spam, and...
Jupiter Airdrop scam is an alleged crypto-airdrop campaign that promises free crypto tokens, yet in return only empties users’ crypto wallets. Parasiting on the...
