Similar to news-themes.com, tionalmorei.online, allhotfeed.com, fast-travel.org, and countless others, onestoreblog[.]com is a rogue website. It operates by loading dubious content and/or redirecting visitors to various (likely untrustworthy or malicious) sites. Users typically access such webpag
RTX is one of the ransomware variants that are part of the VoidCrypt family. RTX encrypts files and modifies their filenames. For instance, it renames "1.jpg" file to "1.jpg.[hoti2020@tutanota.com][MJ-ZS8512639047].RTX", "2.jpg" to "2.jpg.[hoti2020@tutanota.com][MJ-ZS8512639047].RTX". It also crea
Gyjeb is a ransomware-type program designed to encrypt data (render files unusable) and demand ransoms for the decryption. Affected files are appended with a ".[random_string].gyjeb" extension, e.g., a file like "1.jpg" would appear as something similar to "1.jpg.wKkIx8yQ03RCwLLXT41R9CxyHdGsu_T02
Still Sherpa is advertised as a tool for finding content on the Internet. An important detail about this application is that it is classified as adware - it generates advertisements. Most users install adware inadvertently. Advertisements displayed by adware could open potentially maliciou
Simply Convert Files is a browser extension endorsed as a tool for easy file format conversion. It is supposedly capable of converting document, image, and audio formats. Instead, Simply Convert Files operates as adware. Additionally, since most users install adware-type products unintentionally,
Newnet belongs to a family of ransomware called MedusaLocker. This ransomware encrypts files and appends the ".newnet" extension to their filenames. For example, it changes "1.jpg" to "1.jpg.newnet", "2.jpg" to "2.jpg.newnet". Newnet also creates the "HOW_TO_RECOVER_DATA.html" file that contains c
DoppelDridex is a new variant of the Dridex malware. This malicious program has been used to inject systems with additional malware, with the final payload being ransomware. It is noteworthy that DoppelDridex has been actively proliferated via virulent Microsoft Office documents distributed throug
Oataltaul[.]com shows notifications used to promote various scams and other untrustworthy pages and opens websites of this kind itself. It functions like beta-one[.]net, news-themes[.]com, fast-travel[.]org, and plenty of other pages. Most of them are promoted through shady pages, unreliable ads,
MOON is a malicious program designed to encrypt data and demand payment for the decryption. This malware belongs to the Dharma ransomware family. During the encryption process, files are renamed following this pattern: original filename, unique ID assigned to the victim, cyber criminals' email ad
Chld is part of the Dharma ransomware family. This variant encrypts files, appends the victim's ID, keychild@onionmail.org email address and the ".chld" extension to their filenames, and generates two ransom notes (displays a pop-up window and creates the "info.txt" file). Chld renames a file nam