Nnice Ransomware
Nnice ransomware is a malware strain that aims at encrypting user files and demanding ransom payment for their decryption. Detected on January 14, 2025, it presumably targets individuals and small businesses. Upon the encryption,...
Threat research notebook
Gridinsoft Security Lab
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
307 lab recordsIs Softonic Safe and Legit? APK Risks, Reviews & Safer Downloads
Softonic is legitimate, and its Downloader was discontinued in 2015. Check current files, APK permissions, signatures,...
Audiodg.exe High CPU: What It Is and How to Fix It
Audiodg.exe is the Windows Audio Device Graph Isolation process. It is a legitimate Microsoft component that...
Are AI Deepnude Sites Safe?
AI deepnude sites can expose photos, accounts, payments, installs, and consent-sensitive images. Check privacy, scam, malware,...
Research log
MicrosoftHost.exe
MicrosoftHost.exe is a malicious process that the malware creates to disguise itself as a benign process. Users may witness high CPU load coming from...
AlienWare Ransomware
AlienWare is a type of ransomware designed to lock your files and hold them hostage until you pay up. It’s sneaky and frustrating, leaving...
Trojan:Win32/Pomal!rfn Removal
Defender flagged Trojan:Win32/Pomal!rfn? Learn how to check the file path, source, signature, false-positive signs, MSERT scan, and safe removal steps.
Novalock Ransomware
Novalock is a sophisticated form of malware designed to encrypt your files and then demand payment for their release. It belongs to the Globeimposter...
Locklocklock Ransomware
Locklocklock is a ransomware virus designed to lock your files and demand payment to restore access. Victims can identify encrypted files by the addition...
Trojan:Win32/Patched: Meaning and Removal Guide
Microsoft Defender found Trojan:Win32/Patched? Learn what the alert means, when a patched file can be a false positive, and how to remove it safely.
SUPERLOCK Ransomware Virus Simple Step-by-Step Removal Guide
SUPERLOCK is a ransomware infection that aims at blocking access to the files and demanding a payment for getting them back. Users can distinguish...
Brad Garlinghouse Crypto Giveaway Scam Explained
Brad Garlinghouse Crypto Giveaway is a scam campaign that masquerades as a cryptocurrency giveaway. It falsely claimed to be organized by Ripple Foundation with...
Shougnoboassi.net Redirect Virus
Shougnoboassi.net is a website that you may notice appearing in your web browser. It shows a human verification button, and upon interaction redirects the...
Skyjem.com
Skyjem.com is a questionable search engine that you may see appearing in the browser for no obvious reason. Its search results are questionable and...
Ledger Recovery Phrase Verification Scam
“Ledger Recovery Phrase Verification” is a scam email that targets non-vigilant users. Its goal is to trick users into writing down their recovery phrase...
Trojan:PDF/Phish.A: PDF Phishing Alert and Removal Guide
Trojan:PDF/Phish.A means Defender found a suspicious PDF phishing link. Learn when it is risky, how to remove it, and what to scan after a...
Trojan:PowerShell/Malscript!MSR
Trojan:PowerShell/Malscript!MSR refers to a detection linked to malicious script activity. This type of malware typically exploits the system console interface to download and run...
TrojanDownloader:HTML/Elshutilo
TrojanDownloader:HTML/Elshutilo is script-based malware designed to download additional payloads onto the target system. Since detection is based on threat behavior rather than a signature,...
Is Opera GX Safe in 2026? Privacy and Fake Installer Risks
Opera GX is legitimate when downloaded from Opera, but privacy settings, data collection, fake OperaGXSetup.exe downloads, bundled installers, and extensions still need a careful...
Aruba.it Email Scam
The Aruba.it email scam is a phishing campaign using fake emails that appear to be from Aruba S.p.A., a well-known Italian company providing domain...