Jupiter Airdrop Scam
Jupiter Airdrop scam is an alleged crypto-airdrop campaign that promises free crypto tokens, yet in return only empties users’ crypto wallets. Parasiting on the name of a legit and real cryptocurrency, this scam exploits...
Threat research notebook
Gridinsoft Security Lab
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
310 lab recordsContacto Ransomware
Contacto virus is a newly identified ransomware strain that encrypts victims’ files and demands a ransom...
Trojan:JS/FakeUpdate.HNAP!MTB: Browser Cache or Malware?
Defender found Trojan:JS/FakeUpdate.HNAP!MTB? Learn when it is a browser or OBS cache alert, when it is...
RDPLocker Ransomware
RDPLocker is a virus that encrypts the files and demands for a ransom payment for their...
Research log
Is Softonic Safe and Legit? APK Risks, Reviews & Safer Downloads
Softonic is legitimate, and its Downloader was discontinued in 2015. Check current files, APK permissions, signatures, ads, and safer sources.
Audiodg.exe High CPU: What It Is and How to Fix It
Audiodg.exe is the Windows Audio Device Graph Isolation process. It is a legitimate Microsoft component that lets Windows run audio effects, enhancements, spatial sound,...
Are AI Deepnude Sites Safe?
AI deepnude sites can expose photos, accounts, payments, installs, and consent-sensitive images. Check privacy, scam, malware, and reporting risks before uploading anything.
MicrosoftHost.exe
MicrosoftHost.exe is a malicious process that the malware creates to disguise itself as a benign process. Users may witness high CPU load coming from...
AlienWare Ransomware
AlienWare is a type of ransomware designed to lock your files and hold them hostage until you pay up. It’s sneaky and frustrating, leaving...
Trojan:Win32/Pomal!rfn Removal
Defender flagged Trojan:Win32/Pomal!rfn? Learn how to check the file path, source, signature, false-positive signs, MSERT scan, and safe removal steps.
Novalock Ransomware
Novalock is a sophisticated form of malware designed to encrypt your files and then demand payment for their release. It belongs to the Globeimposter...
Locklocklock Ransomware
Locklocklock is a ransomware virus designed to lock your files and demand payment to restore access. Victims can identify encrypted files by the addition...
Trojan:Win32/Patched: Meaning and Removal Guide
Microsoft Defender found Trojan:Win32/Patched? Learn what the alert means, when a patched file can be a false positive, and how to remove it safely.
SUPERLOCK Ransomware Virus Simple Step-by-Step Removal Guide
SUPERLOCK is a ransomware infection that aims at blocking access to the files and demanding a payment for getting them back. Users can distinguish...
Brad Garlinghouse Crypto Giveaway Scam Explained
Brad Garlinghouse Crypto Giveaway is a scam campaign that masquerades as a cryptocurrency giveaway. It falsely claimed to be organized by Ripple Foundation with...
Shougnoboassi.net Redirect Virus
Shougnoboassi.net is a website that you may notice appearing in your web browser. It shows a human verification button, and upon interaction redirects the...
Skyjem.com
Skyjem.com is a questionable search engine that you may see appearing in the browser for no obvious reason. Its search results are questionable and...
Ledger Recovery Phrase Verification Scam
“Ledger Recovery Phrase Verification” is a scam email that targets non-vigilant users. Its goal is to trick users into writing down their recovery phrase...
Trojan:PDF/Phish.A: PDF Phishing Alert and Removal Guide
Trojan:PDF/Phish.A means Defender found a suspicious PDF phishing link. Learn when it is risky, how to remove it, and what to scan after a...
Trojan:PowerShell/Malscript!MSR
Trojan:PowerShell/Malscript!MSR refers to a detection linked to malicious script activity. This type of malware typically exploits the system console interface to download and run...