SHA256 is a piece of malicious software classified as a cryptocurrency miner. It is designed to generate Ethereum (ETH) and Ethereum Classic (ETC) cryptocurrencies. This malware decreases system performance and endangers device integrity. As mentioned in the introduction, SHA256 mines Ethe
Fdrama[.]net is an illegal steaming website offering users to watch movies and TV shows without the copyright holder's permission. Another problem with fdrama[.]net is that this site uses rogue advertising networks: it contains untrustworthy ads and redirects visitors to shady websites. Fd
Grn21 is a piece of malicious software categorized as ransomware. It operates by encrypting data (rendering files unusable) and demanding payment for the decryption. Affected files are with a random character string and the ".grn21" extension. For example, a file titled "1.jpg" would appear simil
AbstractEmu is the name of rooting malware that can gain privileged access to the Android operating system. Threat actors behind AbstractEmu are using legitimate-looking apps (like password managers, app launchers, data savers) to trick users into downloading and opening/executing this malware.
Rocket Speed Booster is an adware-type browser extension. In addition to delivering intrusive advertisement campaigns, this extension also has data tracking abilities. Since most users inadvertently download/install adware products, they are also classified as PUAs (Potentially Unwanted Applicatio
Alertsx[.]com is a rogue website that operates by loading dubious content, pushing its browser notifications, and/or redirecting visitors to other (likely unreliable or malicious) pages. There are thousands of such sites on the Web; loopanews.com, akaiksots.com, and allactualjournal.com are just
Safe Togo is a rogue browser extension that promotes the togosearching.com fraudulent search engine. Due to this behavior, it is classified as a browser hijacker. Additionally, software products within this classification are deemed to be PUAs (Potentially Unwanted Applications) as well. B
QuickSearchMaps is a browser hijacker. It hijacks a browser by changing some of its settings to quicksearchmaps.com - a fake search engine. More often than not, users download and install apps like QuickSearchMaps unintentionally. Therefore, they are categorized as potentially unwanted apps (PUAs)
File.decrypt is ransomware designed to encrypt (and rename) files and create the "#File.decrypt#.txt" file containing instructions on how to contact cybercriminals for file decryption. It renames files by appending the ".file.decrypt" extension to filenames, for example, it changes "1.jpg" to "1.j
Merlen is a piece of malicious software classified as ransomware. It is designed to encrypt data (render files unusable) and demand payment for the decryption. Files are renamed with a random character string and the ".[Merlen@Keemail.Me]" extension (which consists of the cyber criminals' email a