Lsas belongs to the ransomware family called Dharma. It encrypts and renames files. For example, it renames "1.jpg" to "1.jpg.id-1E857D00.[sekurlsa@ml1.net].lsas", "2.jpg" to "2.jpg.id-1E857D00.[sekurlsa@ml1.net].lsas" (it appends the victim's ID, sekurlsa@ml1.net email address and the ".lsas" ext
Fastdatingroom[.]top redirects visitors to questionable websites. It also asks for permission to show notifications. Websites like fastdatingroom[.]top usually get visited accidentally, for example, through shady advertisements, other dubious pages. These sites can be opened by potentially unwante
Finderflash.xyz is a fake search engine. Usually, fake search engines are promoted through browser hijackers - applications designed to modify browser settings. Users rarely download browser hijackers intentionally. For this reason, they are categorized as potentially unwanted applications (PUAs).
Getlastnews[.]com is one of the many websites designed to redirect visitors to other questionable pages and trick them into agreeing to receive notifications. A couple of examples of other pages like getlastnews[.]com are romantic-dates[.]top, music-home[.]info, and mateyhecrie[.]xyz. Getl
Sportsblast.xyz is a fraudulent search engine. Web searchers of this kind are usually promoted by PUAs (Potentially Unwanted Applications) categorized as browser hijackers. Both fake search engines and the software that causes redirects to them - are considered to be a threat to privacy due to tra
Re*.biz (e.g., re01[.]biz; re02[.]biz; re03[.]biz; re05[.]biz; etc.) is a group of rogue websites. They are designed to load dubious content and/or redirect visitors to other (likely unreliable or malicious) sites. There are thousands of such webpages online; ngecauuksehi.xyz, current-captcha.top
Speedsearch.xyz is the address of a fake search engine. Typically, such web searchers are promoted by PUAs (Potentially Unwanted Applications) classified as browser hijackers. It is noteworthy that both illegitimate search engines and the software endorsing them - often spy on users' browsing acti
Romantic-dates[.]top uses a clickbait technique to get permission to show notifications and promotes shady websites. There are plenty of pages like romantic-dates[.]top, for example music-home[.]info, ngecauuksehi[.]xyz, and current-captcha[.]top. They are promoted via shady ads, dubious pages, an
Foxxy is a type of malware that encrypts files and appends a new extension (".foxxy") to their filenames. For example, it renames a file named "1.jpg" to "1.jpg.foxxy", "2.jpg" to "2.jpg.foxxy". Foxxy generates two ransom notes: a displays a pop-up window and creates the "___RECOVER__FILES__.foxxy
Syjua is a malicious program categorized as ransomware. It is designed to encrypt data (render files inaccessible) and demand payment for the decryption. Affected files are appended with a random character string and a ".syjua" extension. For example, a file like "1.jpg" would appear similar to "