P5rwn is a malicious program categorized as ransomware. It is designed to encrypt data (render files inaccessible) and demand ransoms for the decryption. Encrypted files are appended with a random character string and the ".p5rwm" extension. For example, a file like "1.jpg" would appear similar t
Cv2gj is a ransomware-type program. It operates by encrypting data (rendering files unusable) and demanding ransoms for the decryption. Affected files are appended with a random character string and the ".cv2gj" extension. For example, a file initially titled "1.jpg" would appear similar to "1.jp
DefaultEntry is an adware-type app with browser hijacker qualities. Due to the questionable methods used to distribute DefaultEntry, it is also deemed to be a PUA (Potentially Unwanted Application). Adware can display various intrusive ads (e.g., banners, coupons, pop-ups, etc.) on visit
LeadingSystem is the name of an adware-type and browser-hijacking application. It displays unwanted advertisements and changes the affected browser's settings to promote a fake search engine. Usually, apps like LeadingSystem are promoted/distributed using deceptive methods. Thus, users download/
AnalogTransaction is an advertising-supported application with browser-hijacking abilities. Furthermore, this piece of software is also categorized as a PUA (Potentially Unwanted Application). Adware enables the placement of intrusive ads (e.g., pop-ups, coupons, banners, etc.) on visite
It is a malspam campaign used to deliver IcedID. Cybercriminals behind it attempt to trick recipients into believing that they have received an email regarding a violation of the Digital Millennium Copyright Act (DMCA). Their goal is to trick recipients into executing a malicious file downloaded v
Matanbuchus is a loader-type malicious program offered by its developers as Malware-as-a-Service (MaaS). This piece of software is designed to cause chain infections. Since it is used as a MaaS, both the malware it infiltrates into systems, and the attack reasons can vary - depending on the cyber
Mykiger[.]com uses a clickbait technique to trick visitors into agreeing to receive notifications and redirects them to potentially malicious websites. It is similar to linkwinners[.]net, yourcoolfeed[.]com, news-befuka[.]cc, and a great number of other deceptive pages. As a rule, users do not vis
"You've visited illegal infected website" is a scam disguised as a security alert from McAfee. It must be emphasized that this fake alert is in no way associated with the McAfee anti-virus or McAfee Corp. Scams of this type usually endorse various untrustworthy apps, e.g., adware, browser hijacke
Hr1wf is ransomware designed to encrypt files, modify filenames of all encrypted files and create the "i1jv_HOW_TO_DECRYPT.txt" file containing a ransom note. It appends a string of random characters and hte ".hr1wf" extension to filenames. For example, Hr1wf renames "1.jpg" to "1.jpg.INhA59OBVcS