gapconnectionbridge.co.in is a deceptive website that tries to trick users into allowing ads on the desktop. It misuses a legitimate browser feature to do this, which is why you will get a browser alert saying “gapconnectionbridge.co.in wants to show notifications” when you get redirected to the site. If you click “Allow”, the site will be authorized to show notifications aka…
topgreenview.com is a fake search engine promoted by the Top Green Search browser hijacker. If when you perform a search you’re suddenly redirected to topgreenview.com, your computer is infected with a browser hijacker. It’s not a serious infection but it will make unwanted changes to your browser’s settings and try to redirect you to questionable websites. Browser hijackers like Top Green…
The “American Express – ChargeBack Payment” email is part of a phishing campaign that aims to steal users’ American Express account login credentials. The email falsely claims that a chargeback of $1218.16 has been successfully adjusted and can be reviewed by clicking on the provided button. However, if users click on the button, they will be taken to a fake…
QuickSeek is a browser hijacker, promoted as a useful extension. The hijacker is pushing potterfun.com questionable search engine and will set it as your default to force you to use it. If you find that all your searches go through potterfun.com, your computer is infected with a browser hijacker. Several hijackers push the search engine but you can check your…
Weisx App is a questionable program that may suddenly appear on the computer without users recalling how it got installed. It does not appear to currently have any functionality, which is even more disturbing. If you suddenly notice it installed on your device, remove it sooner rather than later as the program raises several privacy and security concerns.
…
SwaetRAT malware is a remote access trojan that has many malicious features that can put users’ computers and data in jeopardy. If it successfully infects a device, it gives its operators unauthorized control over the device. The trojan can monitor users’ activities, steal highly sensitive information, and more. In short, it’s a very serious infection that, if unnoticed, can have…
Held ransomware is a type of malware that encrypts files. It comes from the Djvu/STOP ransomware family. The malicious actors behind this ransomware family release new versions regularly, and Held ransomware is one of the more recent ones. The versions can be differentiated by the extensions they add to encrypted files. This ransomware adds .held to all files it encrypts. Unfortunately,…
octagonfind.com is a fake search engine, usually pushed by browser hijackers. If you find that your browser continually redirects you to octagonfind.com, your computer may be infected with a browser hijacker. Browser hijackers are not serious infections but they hijack browsers and change settings. Specifically, they set questionable sites as users’ homepages and default search engines. In this case, the dubious…