While AI has improved our ability to detect and prevent fraud, these same innovations have empowered cybercriminals with new tools to carry out identity theft. 

The Role of AI in Identity Theft: Friend or Foe?

If you’re wondering, “What is ReasonLabs?” or “How can it help protect me online?” you’re in the right place. This blog will explore how the new Online Security ReasonLabs application has become one of the best tools for safeguarding social security online, protecting your identity, and ensuring privacy.

What Is the Best Digital Secure App? ReasonLabs Application

Geek Squad scams often involve tricking victims into paying for unnecessary services, providing sensitive information, or gaining unauthorized access to their devices. These scams can take many forms, from Geek Squad tech support scams, to Geek Squad billing scams, and fake subscription scams.

Report Phishing! How To Unmask A Geek Squad Scam Email

In this article, we explore the most common types of Amazon scams, explain how to identify and stop them, and provide practical steps to protect yourself from falling victim.

How To Stop Amazon Gift Card Email Scams

At ReasonLabs, we’re committed to helping consumers stay secure. So in this article, we detail new internet scams to look out for, how internet fraud scams evolve, and what you can do to stay safe and secure. 

New Internet Scams To Look Out For This National Internet Day

Instagram scams are on the rise - how do they work and how can you avoid them?

“I Got Scammed On Instagram!” How To Detect An Instagram Scam

In this article, we will dive deep into understanding how QR code scams work and how to protect yourself from falling victim to a fake QR code scam.

How To Recognize A Fake QR Code Scam

Safeguarding your Amazon account requires a proactive approach. By recognizing phishing attempts, understanding the significance of a ‘locked email,’ and knowing how to respond if your account is compromised, you can create a robust defense against cyber threats.

Amazon Account Locked Email: How To Protect Against Phishing

In this review, we’ll tell you how RAV Endpoint Protection lives up to its promises and how it compares to some of the competition. 

Is RAV Endpoint Protection Legit?

October is National Cybersecurity Awareness Month and to learn more about consumers’ internet habits and the cybersecurity issues they face, ReasonLabs commissioned a survey of 7,484 consumers across the United States from August 23 - September 4, 2024. The survey results highlight significant online security, privacy, and identity theft issues.

2024 Consumer Cybersecurity Pulse Report

This guide will explore what Real-Debrid is, how it enhances your Kodi experience, and how to install it on Kodi while activating its fidelity points. 

What Is Real Debrid? How To Install & Activate Its Fidelity Points

FaceTime is one of Apple’s most cherished apps, offering effortless video calls to iPhones, iPads, and Mac users worldwide. However, FaceTime can occasionally encounter problems such as technical glitches, or UX issues like activation. 

Why Is My FaceTime Not Working? How To Activate FaceTime

This blog post will make identifying online scams easy, from familiar ones to newer more advanced threats, and provide insights on how to protect yourself.

Fear Not: Identifying Online Scams Made Easy

In our ever-connected digital world, scammers constantly find new ways to exploit the trust of users worldwide. One of the increasingly common tactics involves fake messages purportedly from the United States Postal Service.

Received a USPS Scam Text? Here's How to Stay Protected

If you are a Canadian traveling abroad or someone trying to enhance your privacy and security online, utilizing a Virtual Private Network (VPN) is a must-do. This article will help walk you through the process of how to get a Canadian IP Address.

How To Get A Canadian IP Address

The word ‘games’ implies fun – but some of these popular online experiences, even those aimed at kids, contain worrying content. Here's what you should be looking out for.

7 Alarming Online Games to Watch Out For

We'll explore effective strategies and tips to help you figure out how to prevent trackers and how to stop being tracked online.

Tired of Being Tracked? How to Stop Being Tracked Online

 In this article, we'll detail how to know if your phone is hacked, what to dial to see if your phone is hacked, describe different signs your phone is hacked, and finally what you should do if your phone is hacked.

What To Dial To See If Your Phone Is Hacked

This blog post will guide you through understanding iMessage, troubleshooting common issues, and teach you how to enable iMessage.

iMessage Not Working? Here's How To Enable iMessage

This blog post will dive into Publishers Clearing House scams, how to identify them, and how you can protect yourself from becoming a victim.

What Is Publishers Clearing House Scam? How To Avoid It

In this blog post, we’ll address these concerns, providing a complete overview of the company, answering the questions of is Shein a scam, is Shein safe to order from, and more.

Is Shein A Scam? Is Shein Safe To Order From? 

There are hundreds of thousands of extensions that range from editing tools to financial trackers, security tools to shopping enhancers. While these useful tools can enhance your browsing experience, some can be malicious and cause harm to your device and your identity. With the release of our new threat intelligence report, we’ll help you determine if your Chrome extension is malicious, how malicious Chrome extensions work, and more. 

Is Your Chrome Extension Malicious? How To Remove Them

Cyber attacks have become a far too regular segment of headlines around the world, highlighting how susceptible our technological infrastructure is. Understanding these attacks and their ramifications is essential to shore up our cyber defenses and protect what matters most to us. In this article, we will delve into the top 10 recent cyber attacks, each illustrating different facets of this evolving threat landscape, and what you can do if you’re asking the question, “Are we under cyber attack?”

Are We Under Cyber Attack? Top 10 Recent Cyber Attacks

A text mail subscriber scam involves the deceptive use of text mail services for fraudulent activities. Scammers leverage these services to send misleading messages, phishing attempts, or engage in various schemes to exploit unsuspecting individuals.

What are Text Mail Subscriber Scams? Learn To Protect Yourself

Scammers are always finding new ways to exploit unsuspecting users. Zelle payment scams are on the rise, with certain scamming tactics becoming increasingly common as they prey on unsuspecting users.

Facebook Marketplace Zelle Scams: Top Tips For Safe Payments

As a Steam user, it’s important to stay informed about common scams and educate your friends and family. Awareness is a powerful tool in preventing scams - while Steam Gift Cards are a convenient way to enhance your gaming experience, it’s essential to be vigilant and informed about potential scams. 

What is a Steam Gift Card Scam? Secure Your Steam Wallet 

If you are a Navy Federal Credit Union member and you are wondering how to report Navy Federal credit fraud, read this blog.

How To Report Navy Federal Credit Fraud

This detailed article will dive deep into what is an IP UK address, how to get a UK IP address, how to use a UK IP address, RAV mobile VPN for iPhone, and more. 

How to Get a UK IP Address

If you’re looking for information on how to reprieve AOL Mail, look no further! Retrieving your AOL mail is a straightforward process and for mobile users, AOL also offers an app for Android and iOS devices.

What is AOL? How to Retrieve AOL Mail

Is identity theft protection worth it? Utilizing identity theft protection can provide peace of mind, especially for seniors who may be more susceptible to fraud and online scams. 

What Is The Best Identity Theft Protection For Seniors?

This blog post will explore spyware, types of spyware, the different types, how it works, how to remove it, and highlight recent examples of significant spyware attacks.

What Is Spyware? How To Find Spyware On iPhone

We will discuss the different types of Cash App scams you should be aware of, how to protect yourself from fake Cash App transactions, and what steps you can take if you become a victim of one of these schemes. 

Cash App Scams & Fraud: How Can I Protect Myself?

Etsy is a popular e-commerce site with millions of buyers and sellers worldwide. It’s no surprise that questions about its safety and legitimacy appear. In this article, we’ll answer the questions - is Etsy Safe? Is Etsy legit? Is Etsy safe to buy from? We’ll also offer steps you can take to protect yourself and your purchases.

Is Etsy Safe? Is Etsy Legit? How To Spot An Etsy Scam

This article will explore how to identify if you’ve had your WhatsApp hacked, the various scams prevalent on WhatsApp, and tips on how to stay safe.

WhatsApp Hacked? How To Know If My WhatsApp Was Hacked

You might be wondering how to get a US IP address, so let’s dive into why you might want one in the first place, what a US IP address look like, how can I get a US IP address, and more. 

How To Get A US IP Address

Mukbang has gained immense popularity across various social media platforms, particularly on video-sharing sites like YouTube, Twitch, and platforms that support live streaming. But what does 'mukbang' and ASMR mean?

What Is Mukbang and ASMR? Effects Of This Social Media Trend

The idea of someone hacking into your device and viewing your screen is a concerning reality. Whether it’s your phone or computer, the implications of a hacked computer screen or a hacked phone screen are serious, as it can lead to stolen data, compromised privacy, and even financial loss. 

Can Hackers See Your Screen? How To Protect Your Devices

Learn how to make your Spotify account more private and enjoy a more secure and personalized music streaming experience.

How To Make My Spotify Private And Secure

Who doesn’t love a good fishing trip? Go ahead, picture the scene: it’s just you,…

What is Spear Phishing? How to Defend Against Spear Phishing

Recognize the signs if your email account has been hacked, and learn what preventative measures you can take.

Has My Email Been Compromised? 5 Signs It's Been Hacked

Identity theft is a growing concern that can have severe consequences for your financial health and personal security - so being able to check if your identity has been stolen is crucial.

How To Check For Identity Theft: 7 Tips For Identity Protection

The csrss.exe Trojan is a type of malware that disguises itself as the legitimate csrss.exe process. Cybercriminals exploit this to hide malicious activities within a process that appears to be a trusted system file. The csrss.exe Trojan can open backdoors, steal sensitive information, and allow unauthorized access to your system.


How To Remove csrss.exe Trojan: A Comprehensive Guide

Scam calls have become a persistent nuisance since their inception, as well as becoming a significant threat to our privacy and security. With the rise of these fraudulent calls, many people have encountered the term "Scam Likely" on their caller ID. 


How To Block Scam Likely Calls

As Instagram continues to evolve, so do the strategies employed by scammers on Instagram. Staying vigilant and informed is essential in safeguarding yourself from these threats. 

Instagram Scam Messages: How To Avoid Them & Protect Yourself

The svchost.exe process is a fundamental part of the Windows operating system, responsible for running essential services efficiently. However, its importance also makes it a target for cybercriminals who create malware disguised as svchost.exe.

What Is svchost.exe Malware? How To Protect Your System 

The security of your Wi-Fi network is paramount in protecting our data and online behavior. This blog explores the potential vulnerabilities, signs of compromise, and effective strategies to protect your Wi-Fi from unauthorized access.

Can Someone Hack Your Wi-Fi Password? Signs & How To Fix It

Ticketmaster is the latest company to suffer a data breach, leading to compromised customer data.
Discovering that your data has been breached can be a troubling experience, but recognizing the signs early can help you mitigate the damage and take appropriate action.

Latest Data Breach: Were You Affected By Ticketmaster Hack?

Search engines are indispensable tools for accessing information. However, as concerns about online privacy grow, many users are seeking alternatives that prioritize their personal data's security. 

Best Secure Search Engines: How A VPN Can Help

ReasonLabs is proud to be recognized by Virus Bulletin alongside other top-tier security providers for excellence in malware detection and prevention

RAV Endpoint Protection Earns A+ Grade In VB100 Certification

With the allure of new online games and the temptation of obtaining them for free, many young gamers might find themselves downloading pirated software. As a parent, it's crucial to understand the risks associated with this practice and how you can protect your children from potential harm.

Is Your Child Gaming Online? How To Avoid Pirated Software

It's time to discuss the notion of ‘the unknown caller’, including what happens if you receive a call from an unknown number, whether it’s dangerous, and what you should do next.

Calls From Unknown Numbers: How To Know If They're Safe

Understand what an Amazon account suspension email is, how to identify when an order confirmation email is fake or real, and how to report fraud. We will also cover why Amazon might suspend an account and offer cybersecurity measures to protect yourself from scams.

Fake Amazon Order Confirmation: How To Recognize Scams

The Zeus virus, also known as Zbot, is one of the most infamous and persistent malware threats to ever hit the cybersecurity landscape. In this blog, we'll delve into what the Zeus virus is, how it operates, and how you can protect yourself from its harmful effects.

Zeus Virus Detected! The Signs You Need To Know

As the frequency of cyber threats and data breaches in the digital age are rampant, consumers are increasingly concerned about the security of their online activities. Web browser extensions, such as Online Security from ReasonLabs, play a crucial role in empowering users to defend themselves against potential threats and data breaches.

Digital Identity Protection: Why Data Monitoring Is An Important Defense

While Cash App (formerly Square Cash) offers convenient ways to manage your finances and send money, it's crucial to remain vigilant and protect yourself from potential scams and fraudulent schemes.

Beware Cash Square Scams! How To Avoid Fraudulent Schemes

One often overlooked aspect of digital hygiene is clearing out your Wi-Fi history. In this blog post, we'll explore why you might want to delete your Wi-Fi history, how to do it, and some additional tips for keeping your digital life organized and secure.

Digital Spring Clean! How To Delete Wi-Fi History

Digital payment platforms like Payoneer have revolutionized the way individuals and businesses send and receive money globally. However, with convenience comes the risk of exploitation by cybercriminals seeking to defraud unsuspecting users. 

Is Payoneer Safe? How To Prevent Digital Payment Scams

While VPNs are commonly associated with desktop computers, their utility extends seamlessly to mobile devices, including Android smartphones and tablets. Using RAV VPN for Android will enhance your online security - find out how!

Best VPN For Android: How To Download RAV VPN 

With the rise of mobile payment platforms like Apple Pay, the ease of sending and receiving money has never been simpler. However, with this convenience also comes the risk of scams and fraudulent activities.

Apple Pay Scams: How To Prevent These Scams

As we attempt globally to go paperless - both for environmental reasons and efficiency purposes - mobile payment platforms like Google Pay offer convenience and competency. However, with the rise of online transactions, there's also an increase in potential scams and fraudulent activities.

Google Pay Card Scam! How To File A Complaint To Google

The recent AT&T data breach has underscored the evolving threat landscape and the importance of robust cybersecurity measures to protect sensitive data, such as the use of the Online Security browser extension. 

AT&T’s Massive Data Breach: All You Need To Know

As one of the world’s most popular social media platforms, Instagram makes it easier than ever to make connections, share experiences, and discover new trends. However, amidst the endless scroll of captivating content lurks the darker world of scams - namely, crypto scams.

How To Recognize Bitcoin Mining Instagram Scams

Restrictions on access to advanced technologies, export control regulations, and concerns about misuse or abuse of AI capabilities can all contribute to limitations on availability of OpenAI. If OpenAI services are not available in your country, there may be a few reasons behind this!

Uh-Oh! Why OpenAI Services Are Not Available In Your Country

Removing hard inquiries from your credit report can be a strategic move to improve your creditworthiness and financial standing.

Secret Ways To Remove Hard Inquiries From Credit Reports Now!

Customer data breaches have become an all-too-common occurrence, posing significant risks to individuals' privacy, financial security, and personal well-being. From large-scale cyberattacks on multinational corporations to targeted phishing schemes aimed at unsuspecting individuals, the dangers of data breaches loom large.

Online Dictionary Data Leak Occurs! What You Need To Know About The Latest Data Breach

The surge in online scams reported by the FBI, and subsequent huge financial losses, reveals the significant threats to consumers' financial security and personal information. But how is this happening? How are malevolent actors managing to get away with so much?

$12.5 Billion Losses From Online Scams! All You Need To Know

Tax identity theft is a serious concern, but with awareness, vigilance, and the right cybersecurity measures, individuals can significantly reduce the risk of falling victim to these scams.

Tax Identity Theft: Protect Yourself from Tax Return Scams & Frauds

It would be nice to believe that giveaway offers on social media platforms are real; however, as with most online ‘too good to be true’ scenarios, this is unfortunately generally not the case. We’ve rounded up some of the most common giveaway scams that occur on the YouTube platform.

Fake YouTube Giveaway Scams: How To Recognize Them!

.msi files are widely used for software distribution and installation due to their standardized format and reliability. While .msi files themselves are not inherently unsafe, they can be manipulated by malicious actors to deliver malware

MSIExec.Exe Files: How To Know If I Can Uninstall Or If It's Safe   

Hackers target Gmail accounts for various reasons, none of which you want to be on the receiving end of. This blog will explore Gmail account hacking, including why hackers target Gmail accounts, how to recognize if your Gmail account has been hacked, steps to recover your Gmail account and password, and crucial tips to protect your Gmail account from future hacking attacks. 

Gmail Hacked Accounts: How to Defend Against Scammers

Malicious code refers to specific lines or segments of code within a program or script that are designed to carry out malicious actions e.g. cause harm, exploit vulnerabilities, or compromise the security and functionality of a computer system, network, or device without the knowledge or consent of the user. 

How To Avoid Downloading Malicious Code: Malware Warning!

This January 2024, the ‘Mother of All Breaches’ is making headlines as a ‘supermassive’ data leak, affecting no less than 26 billion leaked data records. It's time to change your passwords and scan your email to check for personal data breaches!

Data Leaked! How To Secure Your Accounts After The "MoAB"

The increasing reliance on the WhatsApp messaging app has brought to light several security concerns that users should be aware of to protect their privacy and data.

WhatsApp Security Issues: Risks & Dangers Hiding In Your Phone!

Java, a versatile programming language, has become an integral part of countless applications and websites. With its widespread use, scammers have seized the opportunity to exploit users through deceptive Java update scams.

Java Update Scam: Is It Safe To Download Or A Fake Virus?

One crucial tool in the arsenal of identity protection is the Identity Protection PIN (IP PIN). This unique six-digit number adds an extra layer of security to your identity, helping to prevent unauthorized use of your Social Security Number (SSN) and thwart potential identity theft.

Identity Theft Defense: How To Find My Identity Protection Pin

By preventing data breaches and ensuring secure communication, Endpoint Protection safeguards your sensitive information from falling into the wrong hands. 

EPP vs Antivirus: Unmasking the Endpoint Protection You Need

Cyber threats are continually evolving, and one particularly stealthy technique that has gained notoriety is DLL injection. This method allows attackers to compromise the integrity of a system by manipulating dynamic link libraries (DLLs). 

What is DLL Injection Attack? A Hacker's Secret Weapon Exposed

The latest report from ReasonLabs, The Cashback Extension Killer, discusses a set of malicious web extensions disguised as fake VPNs, delivered by a Trojan installer, and distributed through torrent files, that were then live on the Chrome Web Store for months, ultimately affecting over 2 million users! What can we learn from this?

Fake VPNs: How To Prevent Them On Your Device

In the realm of software and digital media, keygens have a notorious reputation. This blog will explore what keygens are, how they work, the associated risks, and how users can navigate the delicate balance between legitimate and illegitimate keygens while safeguarding their cybersecurity.

What Is A Keygen?: How To Safely Activate Software

Rogue security software, often synonymous with fake antivirus, encompasses a broader category of malicious applications that portray themselves as legitimate security tools. This may also be known as ‘rogueware’, ‘rogue antivirus’ or ‘scareware.’

What’s Fake Antivirus & Can It Trigger Rogue Security Software? 

While webcams provide enhanced surveillance capabilities, they also introduce potential risks if not adequately secured. This blog aims to shed light on how to tell if your webcam has been hacked, the implications of unsecured webcams and microphones, and crucial tips to prevent unauthorized access to webcam security software.

Webcam Security Camera: How To Tell If It Has Been Hacked

'Weak security’ in the context of Wi-Fi typically refers to vulnerabilities or inadequacies in the security measures implemented to protect a wireless network. The security of a Wi-Fi network is crucial to prevent unauthorized access, data breaches, and other potential threats. 

Weak Security Wi-Fi? 10 Ways to Strengthen & Fix Security Wi-Fi

The festive season is upon us, bringing joy, warmth, and unfortunately, an increase in holiday scams designed to exploit the goodwill and online shopping frenzy. As you prepare for the festivities, it's crucial to be aware of common scams that could jeopardize your holiday cheer.


12 Scams of Christmas: How To Avoid Holiday Phishing Scams!

Whether you're exploring new websites, chatting on messaging apps, or interacting with AI software like ChatGPT, it's crucial to distinguish between what's real and genuine, and what's fake and possibly malicious. 


How to Recognize Fake ChatGPT & Fake Domains

As businesses and individuals alike host crucial information on web servers, understanding the importance of security for servers and adopting best practices is imperative. In this blog, we'll delve into the realm of web server security and explore its significance, different methods to secure web servers, and the best network security practices to keep your digital fortress robust.


What is Web Server Security? Best Secure Practices To Employ

WhatsApp is a great way to keep in touch with far-off friends and relatives but it also can be a scammer's digital playground.

Coming to a Smartphone Near You! The Latest Round of WhatsApp Scams

Security fraud, encompassing various types of financial scams, has become a pervasive concern. This blog sheds light on what security fraud is and the different types of financial fraud, including bank fraud, payment fraud, and investment fraud, that individuals need to be vigilant about.


What are Securities Frauds? Types of Financial Frauds to be Aware of  

Wi-Fi has become an integral part of our daily lives. We use it for work, leisure, and communication. However, with this convenience comes the responsibility of ensuring that the networks we connect to are secure and safe.

What Is WPA, WPA2 & WPA3? Security Protocols You Can Use

Protecting yourself in our highly connected world begins with knowing how to spot scams, lies, and fake connections. how to identify fake blocked number messages, as well as examine the various signs and techniques used by cybercriminals when it comes to fake text messaging.  

How To Identify A Fake Text Message: Tips For Detection

This Cybersecurity Awareness Month, take proactive steps to protect yourself online. With ReasonLabs products by your side, you can navigate the digital landscape with confidence.

Cybersecurity Awareness Month: How To Empower Your Cybersecurity Journey

Understand the ways in which identity fraud can occur, and the depth to which it can affect the victim.

How Does Identity Theft Happen? Learn to Safeguard Yourself

ReasonLabs’ Revenge of the Unitrix report brings to the fore the latest research on how text tricks can make us run malicious code on our devices.  But what do you as a consumer need to know? Can fonts have viruses? Can font files contain malware and other cybersecurity risks? 

Can Fonts Have Viruses? Cybersecurity: Fonts Dangers To Avoid 

Cybercriminals and hackers constantly seek ways to exploit vulnerabilities in security systems to gain access to sensitive financial information, including credit card numbers.

Credit Card Hacking: How Do People Steal Credit Card Numbers?

Investigate the VBS downloader Trojan VBS:malware-gen detection, and learn how to prevent this malware from attacking your devices. 

What is VBS:Malware-gen?

Find out what to do if your Instagram account gets hacked, and how to keep it safe and secure.

"My Instagram Was Hacked!" How To Recover Your IG Account

By actively monitoring your credit card activities and providing alerts, credit card monitoring services enable you to detect and respond to identity theft in its early stages.

What is Credit Monitoring? 6 Pros of Credit Monitoring Services

You probably already realize that keeping your social security number secure is really important. But what can happen if it gets stolen - and how can you prevent this from happening?

How Can Hackers Steal Your Social Security Number?

Find out more about tax identity theft and how you can prevent yourself from becoming a victim.

What is Tax Identity Theft? How You Can Protect Yourself

What is a credit report and what is a credit inquiry? This blog examines both of these subjects, as well as provides some top tips for the removal of hard inquiries on a credit report.

Top Tips For How To Remove Hard Inquiries From Credit Report

We explore what the dark web is, how it is used, and delve into the cyber concerns associated with this mysterious part of the internet.

Is the Dark Web Dangerous? Understanding Why It's Used

Malicious actors are leveraging the current [number 1 box office movie](https://www.foxbusiness.com/markets/super-mario-bros-movie-tops-1b-continues-four-week-box-office-dominance), Super Mario Bros., to distribute malware. ReasonLabs researchers discovered multiple files downloaded to its users’ devices which were supposed to be Super Mario Bros. but were instead files distributing malicious software. 

The malicious software, a [Trojan virus](https://cyberpedia.reasonlabs.com/EN/trojan.html), installs a web extension that hijacks the user’s search function in order for the cyber attacker to receive monetary gain or steal sensitive information. The cyber attacker distributing this Trojan virus has leveraged trending movies and software in the past, which we recently detailed in our [film piracy report](https://reasonlabs.com/research/film-piracy-report), in order to reach a wide base of users. 

While the Trojan is one of the most widespread malicious extensions distributed today, this is the first time it has been discovered leveraging Super Mario Bros. We’ve been tracking the distributed files for quite some time and first identified them leveraging the movie on April 30th, right after [millions viewed the film on Twitter](https://www.forbes.com/sites/paultassi/2023/04/30/nine-million-people-have-watched-the-full-super-mario-bros-movie-illegally-posted-on-twitter/?sh=45734b61f2be).

## File Names
- c:\users\user\downloads\the super mario bros moviehd.exe
- c:\users\user\downloads\the super mario bros moviecam.exe

## How The Trojan Affects Users
[Browser hijacking](https://cyberpedia.reasonlabs.com/EN/browser%20hijackers.html) changes the settings of a user’s web browser without their consent. They usually change a user’s homepage or their default search engine. They also might install [unwanted applications](https://cyberpedia.reasonlabs.com/EN/unwanted%20applications.html) or add-ons. The objective of a browser hijacker is often to redirect a user’s searches to a different engine or to display unwanted ads, which in turn can generate a profit for the cyber attacker.

The malicious extension is hijacking the users’ web search functions by giving itself numerous sensitive browser permissions. Because it’s a local extension, it can’t be removed from the Google Chrome Web store. Moreover, it’s not supervised or inspected by the Google Chrome Web store team and therefore is not bound by security restrictions. 

The Trojan replaces the primary browser [DLLs](https://cyberpedia.reasonlabs.com/EN/dll.html) to control the default search bar and [injects its own DLL](https://cyberpedia.reasonlabs.com/EN/dll%20injection.html) by writing to the AppInit registry key. We can also infer that because of the wide effort put into the distribution of the Trojan and the evasion techniques used by the attacker, the extension may execute further actions after an update or a period of time.

## Millions Affected Globally
ReasonLabs researchers have discovered this Trojan virus more than 150,000 times in the wild. Outside of ReasonLabs users, there are seemingly millions of affected users around the world. The [RAV Endpoint](https://reasonlabs.com/platform/products/endpoint-protection) Support team has come across users requesting help on how to remove the re-occurring malicious extension on various online forums such as [Microsoft Answers](https://answers.microsoft.com/en-us/windows/forum/all/i-need-help-actually-i-am-getting-an-extensions/55d3f86c-96b5-454d-a760-b26c10b0d0cb), [Bleeping Computer](https://www.bleepingcomputer.com/forums/t/784952/someone-is-hacking-me/), [Reddit](https://www.reddit.com/r/chrome/comments/w9xpzb/is_the_bottom_extensions_a_virus_they_do_not_show/), and [Google support](https://support.google.com/chrome/thread/210695240/extension-macjkjgieeoakdlmmfefgmldohgddpkj?hl=en).

## Trojan Technical Deep Dive
A detailed technical breakdown of how the Trojan functions can be found in the recently published ReasonLabs [film piracy report](https://reasonlabs.com/research/film-piracy-report) under the ‘**Search Hijacker Extension**’ section.

## How Users Can Protect Themselves 
There are many available tools that home users can leverage to protect themselves online. These not only include physical and digital products but also, arguably most importantly, include education.

The need for cyber education by security companies and antivirus providers is essential to reducing vulnerabilities and the success rate of attacks. With [RAV Endpoint protection](https://reasonlabs.com/platform/products/endpoint-protection), a [DNS filter](https://cyberpedia.reasonlabs.com/EN/dns.html), [VPN](https://cyberpedia.reasonlabs.com/EN/vpn.html), and [EDR](https://cyberpedia.reasonlabs.com/EN/endpoint%20detection%20and%20response%20(edr).html), individuals can get the same level of protection as the world’s largest organizations. 


ReasonLabs researchers discovered multiple files downloaded to its users’ devices which were supposed to be Super Mario Bros. but were instead files distributing malicious software.

#Threat Research

The Super Mario Bros. Pirate

Office Documents Are Being Weaponized. How May It Affect You?

Top Cybersecurity Trends for 2023: What Do Home Users Need To Know?

ReasonLabs has joined the Microsoft Intelligent Security Association (MISA)

Complete security for your device, privacy and identity.