What is HyperFracten extension? HyperFracten is categorized as a browser hijacker. It is injected by potentially unwanted application that earns internet traffics by redirecting Google search engine. It is definitely a vicious computer threat that takes over Chrome and Edge browser. It is responsible for unclear subjects. Each time you do some searching, this malware…
Sex-hd.xxx is a malicious website which can take over your Internet browsers. It constantly pops up with fake notifictaions and phishing ads on Google Chrome, Mozilla Firefox, Internet Explorer, Microsoft Edge, Safari, Opera, and always displays Fake warning messages to mislead users, therefore, it is deemed as a severe browser hijacker virus. Apart from bombarding…
Cosmic Plutone – A Web Browser Hijacker Cosmic Plutone is deemed as adware and hijacker that combines browser extension hijacking with system manipulation. This malware is able to employs registry-based persistence and DNS spoofing to maintain control. Victims report 87% browser performance degradation and unexpected redirects per Google search. “After installing a ‘4K Video Downloader’…
What is QuantumPlutonius? Last Updated: March 10, 2025 QuantumPlutonius is identified as a web browser extension malware combining adware payloads with search engine redirection capabilities. Unlike traditional hijackers, it exploits Chrome’s Managed Browser API (chrome.enterprise.deviceAttributes) to establish persistence through fake organizational controls. The QuantumPlutonius extension made its “Remove” button unclickable to avoid being deleted, and…
What is Metalonica Extension? (March 2025 Threat Analysis) Metalonica is a malicious browser extension classified as stubborn browser hijacker by cybersecurity analysts. This malware combines adware payloads with sophisticated registry manipulation, primarily targeting Chrome and Edge through malicious extensions signed with stolen enterprise certificates. Unlike basic hijackers, Metalonica employs DNS shadowing to redirect search queries…
What is twnt1.ttrk.io Redirect Virus? twnt1.ttrk.io have been identified as a browser-hijacking redirect virus targeting Windows and macOS systems. This suspicious site specializes in manipulating browser configurations through registry edits, DNS spoofing, and extension injection. Unlike simple hijacker, twnt1.ttrk.io employs advanced persistence mechanisms including: Registry key modifications at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run DNS server changes to 185.180.**.34 and…
What is Hp-quicker.com? Last Updated: March 7, 2025 Hp-quicker.com is a browser hijacker classified as a “search redirect virus” that forcibly alters browser settings in Chrome, Firefox, and Edge. First documented in January 2025 by our security researchers, this malware injects itself via software bundles and fake browser updates. Once installed, it modifies Windows Registry…
StellarXenonius Browser Hijacker (March 2025 Analysis) First detected in in March 2025 , the StellarXenonius browser hijacker is another stubbonr malware combining browser extension manipulation with search engine hijacking capabilities. This threat specifically targets Chromium-based browsers (Google Chrome, Microsoft Edge) and Firefox installations across Windows 10/11 systems. So far, we have found the following critical…
StellarXenonor Extension: A Hijacker Reredirecting Google to Bing \ Yahoo First detected this week, StellarXenonor is another browser hijacker combining adware and search redirecting capabilities. Unlike traditional browser extension, it is usually “installed by enterprise policy” and cannot be removed with a normal Remove button, for the reason that its Remove button is greied out…
r.v2i8b.com Spam Notification Virus r.v2i8b.com is another spam website specializing in “notification flooding” attacks. This polymorphic hijacker intercept web traffic by injecting malicious JavaScript that forces Chrome and Edge into granting notification permissions. Unlike traditional adware, r.v2i8b.com uses Windows Task Scheduler to maintain persistence through encrypted XML triggers: <Task version=”1.4″> <Triggers> <LogonTrigger> <Enabled>true</Enabled> </LogonTrigger> </Triggers>…
