Medusabtc is part of the Xorist ransomware family. It blocks access to files (encrypts them) and generates two ransom notes (displays pop-up window and creates "HOW TO DECRYPT FILES.txt" file). Also, Medusabtc appends ".medusabtc" extension. For example, it renames "1.jpg" to "1.jpg.medusabtc", "2
Yhlgaopimd is a malicious program belonging to the Snatch ransomware family. It is designed to encrypt data and demand payment for the decryption. In other words, this malware renders files inaccessible and asks for ransoms to restore access to the data. Affected files are appended with a ".yhlga
Mailclick[.]biz displays a fake CAPTCHA to trick visitors into agreeing to receive notifications from it and redirects them to untrustworthy web pages. Pages like mailclick[.]biz are promoted through potentially unwanted apps (PUAs), other dubious pages, or shady ads. Users do not open them intent
520 ransomware prevents victims from accessing files by encrypting them and modifies their filenames by appending the ".520" extension (for example, it renames "1.jpg" to "1.jpg.520", "2.jpg" to "2.jpg.520"). To provide instructions on how to contact the attackers for data recovery, 520 creates th
Similar to 761d.site, premium-shops-around.me, get-positive.net, and many others, news-gemara[.]cc is a rogue site. It operates by presenting visitors with questionable content and/or redirecting visitors to various (likely unreliable or malicious) webpages. Users typically access rogue pages via
TravelBook is an adware-type app endorsed as a tool for quickly accessing travel-related information. This piece of software operates by running intrusive advertisement campaigns. Due to the dubious methods used to distribute adware-type apps, they are also classified as PUAs (Potentially Unwanted
The purpose of to2s[.]biz is to trick visitors into agreeing to receive its notifications and promote various potentially malicious pages. It is pretty similar to rssincewhil[.]xyz, wholedailyfeed[.]com, news-cetugu[.]cc, and hundreds of other pages. To2s[.]biz loads a fake CAPTCHA encoura
Vtua is a piece of malicious software belonging to the Djvu ransomware family. It is designed to encrypt data (lock files) and demand ransoms for the decryption. Affected files are appended with the ".vtua" extension. For example, a file initially titled "1.jpg" would appear as "1.jpg.vtua", "2.j
Exlock belongs to a family of ransomware called MedusaLocker. It encrypts files and modifies their filenames by appending the ".exlock" extension (for example, it renames "1.jpg" to "1.jpg.exlock", "2.jpg" to "2.jpg.exlock"). Other variants of Exlock ransomware may append extension additionally co
Wholedailyfeed[.]com is an untrustworthy page designed to open other pages of this kind and ask for permission to show notifications (often in a deceptive way). There are many examples of other websites of this type. Some of them are 761d[.]site, serviceone[.]info, and get-positive[.]net.