Qmak is a malicious program belonging to the Djvu ransomware family. It is designed to encrypt data (lock files) and demand payment for the decryption. Affected files are appended with a ".qmak" extension, e.g., "1.jpg" would appear as "1.jpg.qmak","2.jpg" as "2.jpg.qmak", 3.jpg" as "3.jpg.qmak",
Searchmime.com is the address of a fake search engine. Browsers cause redirects to fraudulent web searchers due to installed PUAs (Potentially Unwanted Applications) classified as browser hijackers. Browser hijackers operate by assigning illegitimate web searcher addresses as browsers' h
Fastvery is a piece of malicious software belonging to the Phobos ransomware family. It is designed to encrypt data (lock files) and demand ransoms for the decryption. Files are renamed according to this pattern: original filename, a unique ID assigned to the victims, the cyber criminals' email a
"Craiglist email virus" refers to an email spam campaign designed to proliferate malware. These scam emails supposedly relate to a flagged "Craiglist" advertisement. The aim of this spam mail is to infect recipients' systems with Qakbot malware. It must be emphasized that the letters in question
CetaRAT is a malicious program classified as a Remote Access Trojan (RAT). Malware of this type can remotely access and control infected machines. CetaRAT has been observed being proliferated via spam mail and heavily targeting governmental bodies. As mentioned in the introduction, CetaRAT
Decaf is a ransomware-type program. It is designed to encrypt data and demand ransoms for the decryption. In other words, this software renders files inaccessible and asks for payment to restore access. Files are appended with the ".decaf" extension. For example, a file initially titled "1.jpg wo
FlexProduct is a piece of rogue software. It is classified as adware, and it has browser hijacker qualities as well. Since most users inadvertently download/install apps of this type, they are also considered to be PUAs (Potentially Unwanted Applications). Adware can display pop-ups, sur
Cggbt is a ransomware-type programs. It operates by encrypting data (rendering files inaccessible) and demanding payment for the decryption. Files are appended with a random character string and a ".cggbt" extension. For example, a file like "1.jpg" would appear similar to "1.jpg.a0Q9UvAfTJE8ExLh
FocusGuide is an adware-type app with browser hijacker qualities. Due to the questionable methods used to distribute such software products, they are also classified as PUAs (Potentially Unwanted Applications). Adware enables the placement of third-party graphical content on any visited
GoCouponSearch is a browser hijacker promoting the gocouponsearch.com fake search engine. Since most users unintentionally download/install software products of this type, they are also categorized as PUAs (Potentially Unwanted Applications). GoCouponSearch reassigns browsers' default sear