Extortionist ransomware encrypts files and appends the openthefile@mailfence.com email address, a string of ransom characters, and the ".Extortionist" extension to filenames. For example, it renames "1.jpg" to "1.jpg.[openthefile@mailfence.com][MJ-PQ4931720865].Extortionist", "2.jpg" to "2.jpg.[op
Rozbeh ransomware (also known as R.Ransomware) is malware that encrypts files, changes their filenames, and creates the "read_it.txt" file. It renames files by appending four random characters as the file extension. For example, it renames "1.jpg" to "1.jpg.7ufr", "2.jpg" to "2.jpg.1ytu". The text
My Togo is a browser hijacker designed to promote the togosearching.com address, a fake search engine. This app hijacks a browser by changing its settings. A big part of browser hijackers are distributed using questionable methods. Thus, most of them get downloaded and installed inadvertently.
Robin encrypts and renames files. It appends the aaaopenaaa@mailfence.com email address, possibly a victim's ID, and the ".robin" extension to filenames. For example, it renames "1.jpg" to "1.jpg.[aaaopenaaa@mailfence.com][MJ-IF6492831075].robin", "2.jpg" to "2.jpg.[aaaopenaaa@mailfence.com][MJ-IF
Beparaspr[.]com attempts to get permission to show notifications and redirects visitors to questionable websites. Most of these pages get opened through untrustworthy ads, other shady pages, potentially unwanted applications (PUAs). Users do not open them intentionally. Beparaspr[.]com dis
ElementSignal is an untrustworthy app designed to display annoying ads and hijack a web browser by changing its settings. Typically, users do not exactly know how they have downloaded and installed adware/browser hijackers. Thus, ElementSignal (and other apps of this type) are categorized as pot
The purpose of this website is to trick visitors into downloading and installing a potentially unwanted application (PUA). It claims that a device has been hacked and encourages to protect it with a specific application. This and similar pages using scare tactics to promote questionable software
BoostResource can display advertisements, promote a fake search engine, and read sensitive information. It functions as advertising-supported software and a browser hijacker. In most cases, users download and install apps of this type accidentally. Therefore, they are called potentially unwanted
Smart Search is the name of a browser hijacker designed to promote the searchsmarters.online address (a fake search engine). It hijacks a browser by changing its settings and keeping them unchangeable. Apps of this type are categorized as potentially unwanted applications (PUAs) because most users
UpdateAgent (also known as WizardUpdate) is a piece of malware targeting Mac computers. Research shows that the latest UpdateAgent variant poses as legitimate software. It can collect certain information and install adware (and host additional payloads). UpdateAgent malware examines the