BrickLink Reopens After Usernames and IP Addresses Were Accessed
BrickLink has reopened after some usernames, IP addresses and very few emails were accessed. Its notice separates exposed identifiers from passwords and lost inventory.
Gridinsoft security desk
Security Blog
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
Notion Reports Third-Party API Keys Exposed in AI Chats
Notion revoked its exposed API keys and notified other vendors about keys found in affected AI chats. Here…
GSocket Keeps Linux Server Access Alive After Patching
Microsoft traces GSocket intrusions from web apps to hidden clients and shared relays. What Linux hosting owners need…
Guides
View all
Casino Asking for Another Deposit to Withdraw Winnings? What to Do
A casino says it needs one more payment to release your winnings. Check what left your account, distinguish a real ID check…
Repair desk
View all
Abinuliks or Ahtangurics Application: Why the Service Returns
Ending Abinuliks Service may stop it only briefly. Check what starts the unwanted application, remove detected components, and see what returns after…
Trojan:Win32/Sabsik.EN.B!ml: Removal and False Positive Checks
Understand the exact Sabsik EN.B Defender alert, keep suspicious files quarantined, and use Gridinsoft Anti-Malware to investigate repeat detections.
Trojan:MSIL/Jalapeno!MTB: Removal and False-Positive Checks
Check Trojan:MSIL/Jalapeno!MTB by its file path and quarantine status. Separate browser-cache alerts from an installer that…
Domain Age of Flagged Online Stores: A Study of 1,000 Records
Gridinsoft studied 1,000 flagged store records. Compare domain ages for new records and updates, with date…
How Malware Abused Paste.tc: XWorm, LimeRAT, and AsyncRAT Cases
A cross-case investigation of how AsyncRAT, LimeRAT, and XWorm used Paste.tc raw pages as C2 resolvers…
Plushiefun.xyz PowerShell Chain Found Under HP Task Identities
Gridinsoft Labs observed plushiefun.xyz on nine endpoints where activity under Hewlett-Packard Diagnostics task identities led into…
Planet Search Chrome Extension: Is It Safe and How to Remove It
Planet Search can route Chrome searches through hidden intermediaries to Nextgeeker. Verify its ID, remove it,…
Rotating Names, Stable Loader: A Polymorphic CoinMiner Cluster on Chinese Windows Systems
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed…
OkoBot/TookPS: New C2 and GDrive Backup Sync Task
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Payment to Bank Details DOCX: Broken altChunk Lure Analysis
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Latest from every desk
Security News
Falcon C2 Uses a Fake PDF Viewer to Spy Through the Browser
Unit 42 traces Falcon C2 from compromised webmail to a fake PDF extension. How…
Troubleshooting
How to Remove the PDF2Docs.com Redirect from Your Browser
Stop searches from going through pdf2docs.com. Check the extension and search provider in Chrome,…
Security News
Citrus Ransomware Spreads Through Fake Security Deployment
A new investigation traces Citrus from stolen contractor logins to a fake security rollout.…
Security News
Chrome Fixes Exploited XML Flaw: Relaunch to Apply the Update
Google confirms exploitation of CVE-2026-125350. Check the fixed Chrome builds for desktop, Extended Stable…
Troubleshooting
Chrome Redirects to Bing Even When Google Is the Default
Find what changes a Chrome search to Bing. Compare the address bar with a…
Security News
Miasma Worm Turns AI Coding-Agent Setup Into a Trap
SafeDep found malicious setup files and agent hooks in 12 GitHub repositories. See how…
Troubleshooting
Virus Found in System Volume Information: Is It Still Active?
Read the scan path, time, and action to tell a suspect restore point from…
Troubleshooting
How to Back Up Files From an Infected Windows PC
Choose which files to rescue before reinstalling Windows, protect your last good backup, and…
Troubleshooting
App Control for Business Blocked an App: What to Check
Find the file Windows blocked, read event 3077, and decide who can approve the…
Troubleshooting
GfxDownloadWrapper.exe: How to Check an Intel Crash or Firewall Alert
Check which copy of GfxDownloadWrapper.exe ran, match it to your Intel graphics driver, and…
Troubleshooting
SmartScreen Can’t Be Reached Right Now: What to Check Before Running an App
SmartScreen unavailable when opening an installer? Check the connection and the file separately, and…
Troubleshooting
CC_Engine_x64.exe High CPU: Diagnose MSI Center Safely
CC_Engine_x64.exe using high CPU? Verify the MSI file, isolate monitoring triggers, separate WMI load…