“Norton Security – Your PC is infected with 5 viruses!” is a fake anti-virus alert that tries to trick users into downloading questionable or even malicious programs. It’s a very common scam that falsely claims your computer is infected with viruses. In this particular case, the fake alert informs you that your computer is infected with 5 viruses. These scammers…
Hgsh ransomware is a file-encrypting malware from the Djvu/STOP malware family. The group operating this ransomware has released hundreds of ransomware infections so far and continues to release them on a regular basis. Hgsh ransomware is the most recent version. It encrypts your files and then demands that you pay a ransom to be able to recover them. You will not…
“Pornographics Security Warning” is a fake security alert that promotes a tech-support scam. Supposedly, your Windows computer has been blocked because you were browsing questionable websites. In reality, you were simply redirected to a fake Microsoft website that displays a fake alert. The whole point of this tech-support scam is to trick users into calling fake tech-support numbers. Scammers on…
Yqal ransomware is file-encrypting malware from the Djvu/STOP ransomware family. It’s a pretty generic ransomware infection, practically identical to the other versions released by the cybercrime group operating Djvu. You can differentiate which version you are dealing with by the extension added to encrypted files. This particular version adds .yqal, hence why it’s known as Yqal ransomware. Unfortunately, you will not…
Wnlu ransomware is a generic ransomware infection that encrypts files. It comes from the notorious Djvu/STOP ransomware family, which is responsible for ransomware like Moia, Rigj, Robm, and Iisa. You will not be able to open any of the encrypted files unless you first run the files through a special decryptor. Unfortunately, the only people with a decryptor are the…
UK’s consumer protection organization Which? has warned of an ongoing Omicron variant-themed phishing campaign. These phishing emails claim that to avoid restrictions, people need to order a free PCR test. They can do that by clicking on the link in the email. Clicking on the link would lead to a fake NHS website. The site asks users to put in…
Catedlittlem.xyz is a highly questionable website that pushes a social-engineering scam to trick users into allowing advertisements on the desktop. It misuses a legitimate browser feature that allows sites to ask for permission to display notifications. This is why you will see a browser notification saying “Catedlittlem.xyz wants to show notifications” as soon as you enter the website. But instead…
In November’s edition of cybersecurity news headlines, we talk about three stories. International law enforcement operation GoldDust led to 7 arrests in relation to the REvil/GandCrab cybercrime gangs. NordPass released a list of the year’s most popular passwords, with disappointing but not surprising results. And the US is now offering a $10 million reward for information about REvil and DarkSide…