Malware Lab

Malware security alerts, detailed malware analysis reports and ransomware decrypters straight from our industry experts at the Emsisoft Malware Lab.

Jan 31, 2011

2 min read

This malware will block your Facebook. Beware!

Malware continues to attack Facebook users. This time, the malware is able to spread through Facebook chat messages by sending a message along with a malicious links to the user’s friends. The message looks like this: hahahh Foto :D hxxp://apps.facebook.com/glombotke/photo.php?=1012323960 The link will lead to the malicious Facebook application page. With the social engineering techniques, […]

Jan 18, 2011

3 min read

Warning: Surprise spam trojan on Facebook

Ever received messages from your Facebook friends containing a notice or invitation, such as an invitation to visit a particular site, added with an interesting message, like “Hey watch this, so cool!”? In most cases, the recipient of the message will be happy to follow it, especially if the message was sent by one of […]

Jan 1, 2011

1 min read

The Fake Defragmenter Invasion

Since the beginning of its popularity in the end of October 2010; a rogue defragmenter still continues to haunt the users, which in the end of 2010 has reached 20 variants, and may still continue to rise. The author has never stopped producing new variants. As is typical of the rogue application, this rogue defragmenter […]

Dec 17, 2010

2 min read

Do not Install, I’m malware!

We received an email from ‘Instant Spyware Remover’, saying that Emsisoft Anti-Malware have a false positive, detecting their application as malware. Alright, to prove it, I downloaded the latest installer from www.InstantSpywareRemoval.com as they say, and tested it on a clean machine. Then, what I found next was very interesting and made me laugh: this […]

Dec 3, 2010

2 min read

Scam emails: BlackBerry, Western Union, UPS, DHL, FedEx,…

There are quite a lot of people who get an email from Amanda Lee ([email protected] or [email protected]) which says she is the Marketing Manger of the BlackBerry. According to the message, the BlackBerry will give a mobile phone for free by simply forwarding the email to several people; as also reported by Hoax-Slayer. In addition, […]

Nov 19, 2010

3 min read

Highly advanced worm for sabotage nuclear facilities

A few days ago, it was reported that the Stuxnet worm attacked Heysham Power Station, a nuclear power station in UK. One of two reactors at Heysham 1, owned by the French energy company, EDF. However, as quoted from TheRegister, an EDF spokesperson said “I can confirm that on Heysham 1 there is no Siemens S7 […]

Oct 20, 2010

2 min read

Rogues keeps coming, and fake alerts

With our continuous series of exposing prevalent widespread rogue security products, we carried out a deep analysis on Antivirus Studio 2010. Emsisoft Anti-Malware detects the threat as Adware.Win32.AntivirusStudio2010. The rogue has been very prevalent in recent weeks and having common characteristics of performing a fake scan when it gets executed in the system. The rogue […]

Oct 2, 2010

3 min read

New age of Social (Network+Engineer)ing

Social Networking has really taken off in the last couple of years, and websites related to the same are experiencing big time hits all around the world. Facebook, Twitter, Orkut, and then there is Vkontakte (Vk.com for English speaking users), each having millions of users registered and thus huge targets for malware authors. The more […]

Sep 15, 2010

3 min read

Here You Have. – An analysis

In the security and malware research space, every now and then there comes something which suddenly becomes widespread and raises eyebrows all around. The latest “Here You have” related worm is one such incident and we thought to share with end-users our findings and also make them aware of its capabilities and technicalities. Emsisoft Anti-Malware […]

Sep 11, 2010

1 min read

From spams to botnets

At Emsisoft Labs we are always on the lookout for something out of the ordinary happening, and we recently came across a circulation of spam portraying as fake FedEx Emails. Emsisoft AntiMalware will detect and remove the same as Trojan-Dropper.Win32.Oficla (alias Sasfis). The email comes with subjects like “ID N4815147” or “FedEx Item Status N5561690” […]

Emsisoft > Blog > Malware Lab > Page 45

Malware Lab

This malware will block your Facebook. Beware!

Warning: Surprise spam trojan on Facebook

The Fake Defragmenter Invasion

Do not Install, I’m malware!

Scam emails: BlackBerry, Western Union, UPS, DHL, FedEx,…

Highly advanced worm for sabotage nuclear facilities

Rogues keeps coming, and fake alerts

New age of Social (Network+Engineer)ing

Here You Have. – An analysis

From spams to botnets

Newsletter