UK’s consumer protection organization Which? has warned of an ongoing Omicron variant-themed phishing campaign. These phishing emails claim that to avoid restrictions, people need to order a free PCR test. They can do that by clicking on the link in the email. Clicking on the link would lead to a fake NHS website. The site asks users to put in…
Catedlittlem.xyz is a highly questionable website that pushes a social-engineering scam to trick users into allowing advertisements on the desktop. It misuses a legitimate browser feature that allows sites to ask for permission to display notifications. This is why you will see a browser notification saying “Catedlittlem.xyz wants to show notifications” as soon as you enter the website. But instead…
In November’s edition of cybersecurity news headlines, we talk about three stories. International law enforcement operation GoldDust led to 7 arrests in relation to the REvil/GandCrab cybercrime gangs. NordPass released a list of the year’s most popular passwords, with disappointing but not surprising results. And the US is now offering a $10 million reward for information about REvil and DarkSide…
If your files have the .moia file extension, your computer is infected with the Moia ransomware. Because the ransomware encrypts files, you will not be able to open any of the files that have that extension. Moia ransomware comes from a known family of ransomware called Djvu/STOP and is one of the hundreds of versions currently out there. Because you cannot easily decrypt…
Izationser.xyz is a generic website that tries to deceive you into allowing its advertisements to appear on your desktop. Deceptive websites like this one misuse a legitimate browser feature that allows sites to show users notifications on the desktop. Thus, when you get redirected to the site, you will see a browser alert saying “Izationser.xyz wants to show notifications”. While…
Rigj ransomware is malware that encrypts files. This ransomware comes from the Djvu/STOP malware family. It is operated by a notorious cyber gang that releases malware every few days. The ransomware targets personal files, and once files are encrypted, you will not be able to open them unless you first run them through a decryptor. Unfortunately, the only people with…
Robm ransomware is a generic file-encrypting malware from the notorious Djvu/STOP ransomware family. It’s a dangerous piece of malware that will essentially take your personal files hostage and demand payment for a decryptor. The group operating this ransomware is notorious for releasing ransomware versions on a regular basis. The versions are more or less identical to another but can be…
Iisa ransomware, or .iisa file-encrypting malware, is one of the more recent versions from the notorious Djvu/STOP ransomware family. It’s a dangerous piece of malware that will encrypt your files and demand payment for their decryption. This ransomware comes from the same family as Pqgs, Utjg, Futm, and Qmak. These ransomware versions are operated by a notorious cyber gang that…