It is a phishing email claiming that recipients have received an encrypted message and can open it via the attached file. The purpose of this email is to trick recipients into opening an HTML file designed to open a fake Microsoft page and entering their account login credentials on it. Th
Similar to businesspayments.org, ourcoolstories.com, spdate.com, new-updates-service.com, and many others, hrougthatsidh[.]club is a rogue site. It is designed to load questionable content and/or redirect visitors to other (likely dubious or malicious) webpages. Users typically access rogue websi
NAME LOCKER is a malicious program belonging to the Babuk Locker ransomware family. It is designed to encrypt data (render files unusable) and demand ransoms for the decryption. Compromised files are appended with the ".crypt" extension. For example, a file like "1.jpg" would appear as "1.jpg.cry
Wixawm is ransomware that encrypts files (makes them inaccessible), modifies filenames of all encrypted files, and generates two ransom notes: "Decryption-Guide.txt" and "Decryption-Guide.HTA". It renames files by appending a string of random characters, the wixawm@gmail.com email address, and ".w
J2xnp is a ransomware-type program. It operates by encrypting data (locking files) and demanding payment for the decryption. Affected files are appended with a random character string and the ".j2xnp" extension. For example, a file originally titled "1.jpg" would appear similar to "1.jpg.x4S3X7Tz
Melomovie[.]com is an illegal TV show, movie, and anime streaming and download website. Also, it uses rogue advertising networks. Melomovie[.]com infringes copyright and redirects visitors to questionable/potentially malicious websites. Websites using rogue advertising networks promote unt
PlusMethod is a piece of rogue software. It has adware and browser hijacker qualities. Since most users unintentionally download/install apps like PlusMethod, they are also categorized as PUAs (Potentially Unwanted Applications). On visited websites and/or different interfaces - adware c
Prynt is a ransomware-type program that encrypts data (locks files) and demands payment for the decryption. There is reason to believe that Prynt Remote is still in development, as its ransom note is missing crucial information. Compromised files are appended with a ".prynt" extension. For exampl
Delta Team is a ransomware-type program. It is designed to encrypt data (render files inaccessible) and demand ransoms for the decryption. Affected files are appended with the ".deltapaymentbitcoin@gmail.com" extension. For example, a file originally named "1.jpg" would appear as "1.jpg.deltapaym
Blastoise is ransomware - a form of malware that encrypts files. Additionally, Blastoise appends the ".blastoise" extension to filenames and creates a ransom note (the "How To Restore Your Files.txt" file). For instance, it renames "1.jpg" to "1.jpg.blastoise", "sample.png" to "sample.png.blastois