Rplnd25.com is a generic website that promotes various scams. In addition to currently promoting a fake gift card giveaway, the site is also misusing a legitimate browser notification that allows sites to ask for permission to show notifications on the desktop. As soon as you enter the site, you will see a browser alert saying “Rplnd25.com wants to show notifications”.…
Deretikijob.xyz is a generic scam website, one of the thousands that misuse a legitimate browser feature in order to spam users with ads. Browsers have a feature that allows websites with users’ permission to show push notifications on the desktop. However, scam websites like Deretikijob.xyz misuse this feature to show users questionable, even potentially dangerous ads, on the desktop. If you…
Qbaa ransomware is a very generic file-encrypting malware infection, released by the same cybercrime gang operating the Djvu/STOP ransomware family. Qbaa ransomware is essentially identical to all other versions from the Djvu malware family. But you can recognize which version you’re dealing with by the extension added to encrypted files. If you cannot open your files and they have .qbaa added…
Orkhovdi.xyz is one of many highly questionable websites that push a social engineering scam to trick users into allowing advertisements on the desktop. In order to do that, the site is misusing a legitimate browser feature that allows sites with permission to show push notifications that appear on the desktop. Only instead of useful content, sites like Orkhovdi.xyz start spamming users…
“Your Password Expires Today” email is a fake warning email sent by malicious actors to phish personal information/login credentials and/or trick users into downloading malicious software. The email is disguised to look like it’s sent by Microsoft to warn about your account closing if you do not validate it. It’s a very common type of scam that either intends to…
Iiof ransomware is file-encrypting malware from the Djvu/STOP ransomware family. It’s yet another ransomware version to come from this malware family, one of the hundreds already released. Because this ransomware encrypts files, it’s considered to be a very dangerous infection. It targets personal files, encrypts them, and then demands that you pay to recover them. Unfortunately, once files are encrypted,…
“Army of Ukraine need your support” scam email is an attempt by scammers and cybercriminals to make money during a time of crisis. The email encourages recipients to make donations to support the Ukrainian Armed Forces using the provided Bitcoin and Ethereum wallet addresses. But while the email does link to the legitimate National Bank of Ukraine website, the wallet…
Fgnh ransomware is a generic file-encrypting malware infection, yet another ransomware from the Djvu/STOP malware family. The cybercrime gang operating these ransomware infections releases new versions every couple of days, with likely hundreds already released. Because it encrypts personal files, it’s considered to be a very serious infection. Unfortunately, encrypted files can only be decrypted using a special decryptor but…