Matrixstar[.]net uses a clickbait technique to trick visitors into allowing it to show notification and opens questionable websites. It has the same purpose as ryaouposit[.]space, othemyinetere[.]space, sistheberth[.]xyz, and a great deal of other websites. Matrixstar[.]net loads a fake CA
Search.r0n3.com is a fake search engine. Typically, such web searchers are promoted by browser hijackers. Search.r0n3.com has been observed being pushed by the ValidConfigType adware-type PUA (Potentially Unwanted Application). Furthermore, this search engine likely collects browsing-related dat
Scammers behind this phishing scam attempt to trick unsuspecting recipients into providing their Microsoft account credentials. They try to deceive people through a link within a PDF document, which is downloaded through a Dropbox shared link contained within another PDF document. This document c
Scammers behind this email claim to have hacked into a computer and recorded recipients watching pornography. Their goal is to trick recipients into transferring money for not sending the recorded video to other people. Scammers claim that they have hacked a computer and copied all data fr
ValidConfigType is a rogue with adware and browser hijacker qualities. Due to the questionable methods used to distribute software products within these classifications, they are also considered to be PUAs (Potentially Unwanted Applications). ValidConfigType has been noted being spread via fake
Marlock is part of the ransomware family called MedusaLocker. It encrypts files and appends the ".marlock7" extension to their filenames (for example, it renames "1.jpg" to "1.jpg.marlock7"). Different variants of Marlock ransomware appends ".marlock20", ".marlock5", ".marlock22", ".marlock011", "
WebMusicSearch is a browser hijacker designed to promote the webmusicsearch.com search engine. Additionally, this browser extension likely has data tracking abilities. Due to the questionable methods used to distribute browser hijackers, they are also categorized as PUAs (Potentially Unwanted Appl
Expensivesurvey[.]online loads deceptive content, asks for permission to show notifications, and opens potentially malicious websites. It is pretty similar to othemyinetere[.]space, smartcaptchasolve[.]top, ryaouposit[.]space, and lots of other sites. It is uncommon for pages like expensivesurvey[
"BITCOIN DONATE" is a scam promoted on various deceptive websites. It claims that users will receive cryptocurrency for participating in the "MUTUAL ASSISTANCE FUND"/ "Bitcoin Help" project. Supposedly, users will receive donations from other participants, but they will also have to transfer 0.001
Koom encrypts files so that victims could not access them without a decryption tool purchased from the attackers. It also appends the ".koom" extension to filenames (for example, it changes a file named "1.jpg" to "1.jpg.koom", "2.jpg" to "2.jpg.koom"), and creates a ransom note (the "_readme.txt"