AKO is ransomware that encrypts files and modifies their filenames by appending the ".AKO" extension. For example, it renames "1.jpg" to "1.jpg.AKO", "document.txt" to "document.txt.AKO". AKO generates two ransom notes: "AkoReadMe.html" and "AkoReadMe.txt". This ransomware is part of the MedusaLoc
IndexerService has two purposes: to generate advertisements and promote a fake search engine. It functions as adware and a browser-hijacking app. Typically, apps like IndexerService are distributed (and promoted) using questionable, often deceptive methods. Therefore, users install (and download
Keep Fast Search is a browser hijacker that hijacks a web browser by changing its settings. The purpose of this application is to promote keepfastsearch.com - a fake search engine. Also, it can read browsing history. Users often download and install browser-hijacking apps inadvertently. Ke
Scammers behind this email attempt to trick recipients into believing that they have been selected to receive a donation from the Google Foundation. The file attached to this email (a PDF document) contains a fraudulent request to provide certain information and contact scammers. The PDF d
Protectnscan[.]com displays deceptive content to promote shady websites and asks for permission to deliver notifications. It is very unlikely that someone would visit protectnscan[.]com on purpose. This page is similar to webdefencesurvey[.]com, rewardsltd[.]com, stayprotectedsupport[.]com, and ma
Adskip PRO is described as an extension that blocks ads on YouTube, Google and blocks more than 120 ad trackers. However, this app does the opposite - it generates advertisements. For this reason, Adskip PRO falls into the category of advertising-supported software. Adskip PRO displays ads
The purpose of antirobotsystem[.]com is to promote shady websites. It redirects users to shady websites and asks for permission to show notifications that promote those pages. In order to trick visitors into allowing it to show notifications, antirobotsystem[.]com uses a clickbait technique.
Wholecoolposts[.]com is designed to trick visitors into agreeing to receive notifications and promote other dubious pages. There are plenty of pages similar to wholecoolposts[.]com, for instance, phonenow[.]net, wholenicenews[.]com, mykiger[.]com. One more thing that these pages have in common is
MyADBlocksSearch is a browser hijacker designed to promote the myadblocks.com address. Myadblocks.com is a fake search engine. MyADBlocksSearch promotes this fake search engine by changing some of the web browser's settings. Typically, users install browser-hijacking apps unknowingly. MyAD
RL Wana-XD is the name of ransomware that encrypts files. It also appends the ".XD-99" extension to filenames (for example, it renames "1.jpg" to "1.jpg.XD-99", "sample.png" to "sample.png.XD-99"), and creates a text file ("Readme.txt") containing a ransom note. Screenshot of files encrypted b