Aulmhwpbpzi belongs to the Snatch ransomware family. It encrypts and renames files by appending its extension (".aulmhwpbpzi") to filenames. For example, "1.jpg" is renamed to "1.jpg.aulmhwpbpzi", "2.jpg" to "2.jpg.aulmhwpbpzi", and so on. Aulmhwpbpzi creates a ransom message within the "HOW TO R
Typically, websites such as bestpeacheu[.]com are promoted by other bogus websites, dubious ads, or potentially unwanted applications (PUAs). I.e., users do not often visit them intentionally. The main purpose of bestpeacheu[.]com and similar sites is to trick visitors into downloading PUAs.
Typically, apps that are classified as a browser hijackers change browser settings without users' permission (they assign them to the address of a fake search engine). Private Deep promotes keysearchs.com in this way and also collects browsing history. Users often download and install browser hij
M88P encrypts files and changes the filename of each encrypted file by replacing it with the marco88Polo@criptext.com email address, a string of random characters, and the ".M88P" extension. For example, "1.jpg" is renamed to "[Marco88Polo@criptext.com].2dTJHVkP-KGU2jY25.M88P", "2.jpg" to "[Marco
fast2captcha[.]com is similar to myniceposts[.]com, fastsolvecaptcha[.]com, kersatur[.]online, and many other web pages. Note that users do not often visit these pages intentionally - they are opened by installed potentially unwanted applications (PUAs), through other bogus web pages, or via dubio
A popular method used by cyber criminals to deliver malware is to send emails that contain a malicious attachment or download link for a malicious file. Usually, these emails are disguised official, important messages from legitimate companies and organizations. The main purpose of these emails i
TeslaRVNG1.5 belongs to the Ouroboros ransomware family. This ransomware encrypts files and renames them by prepending the victim's ID, tesla369@cock.li email address, and appending ".teslarvng1.5" extension to their filenames (an updated variants use the ".teslarvng2" and ".teslarvng3" extensions
ActivityConfig functions as adware and also as a browser hijacker: it generates advertisements modifies browser settings to promote a fake search engine. It is also likely that this app gathers browsing-related and/or other information. Note that users often download and install ActivityConfig
RansomExx encrypts files and modifies their filenames by appending a specific extension, which depends on the target name (for example, the name of the organization). Cyber criminals have used this ransomware to attack the Texas Department of Transportation. In this case, encrypted files had the
There are many technical support scam websites claiming to be official Microsoft (or other company) websites and claiming that the computer is blocked, infected, or another problem needs to be solved immediately. Commonly, these web pages display pop-up windows instructing potential victims to ca