Monthly Archives: August 2020

GraceWire is a threat that uses stealth techniques to slither into Windows operating systems so that it could collect sensitive data without notice. Our Anti-Spyware-101.com research team identifies this Trojan as an info-stealer. Since the functionality of this malware appears to be quite limited, there is a high chance that it could run along with other malicious threats. The Trojan belongs to the Evil Corp group, also known as the Dudear group, and it is well-known for other infections. We talk more about them further in the report. The targets of this group are unknown, and it is possible that it does not conduct targeted attacks at all. Perhaps the group is taking advantage of anyone it comes across. If we learn anything new about this malware, we will surely update this report as soon as possible. If you continue reading, you will learn how this infection spreads, which, hopefully, will help you keep it away from your operating system. We also touch on the removal of GraceWire, which, of course, is crucial. Read more »

If Nlah Ransomware invades your system successfully, it messes with the data of your personal files, and also attaches the “.nlah” extension to mark them. The infection uses the method of encryption to ensure that you cannot read your own files, and that can push you into a very unfortunate situation. Our research team has thoroughly inspected this malicious file-encrypting malware, and we can guarantee that it is a clone of Usam Ransomware, Kuus Ransomware, Maas Ransomware, Sqpc Ransomware, and many other infections from the STOP Ransomware family. Quite likely, the same attacker is responsible for all, or at least most, of them, and there is proof for this conclusion. All in all, whether we are dealing with one attacker or hundreds of them, your system is just as vulnerable, and your files are just as locked. Sadly, it is not possible to recover the files by removing Nlah Ransomware. Nonetheless, this infection must be deleted ASAP, and we can show you how to do it. Read more »

Windows users beware, Usam Ransomware is on the loose. Unprotected systems with unpatched vulnerabilities are the ones that are likely to be affected by this dangerous threat, but note that it might not need to use vulnerabilities or secret backdoors to slither in. It might simply trick you into executing it yourself. This could be done by hiding the launcher of the infection within spam emails or bundled downloaders. In fact, cybercriminals have many different ways, in which malware can be spread, and it is your responsibility to ensure that your own operating system is an impenetrable fortress. Unfortunately, to some users, that is easier said than done. Anti-Spyware-101.com researchers know very well what happens when ransomware slithers into an operating system. If the threat is caught and removed in time, disaster can be avoided. If the threat encrypts files first, victims might be enveloped into a scam. Keep reading to learn more about this scam as well as how to delete Usam Ransomware. Read more »