tionscalen[.]top is one of many deceptive websites that use a scare tactic to trick users into believing they must download and install (sometimes even buy) a potentially unwanted application (PUA). One common tactic used by tionscalen[.]top and similar pages to trick unsuspecting into unnecess
HDSportsSearch is rogue software categorized as a browser hijacker. Following successful installation, it makes changes to browser settings to promote the hdsportssearch.com fake search engine. Furthermore, most browser hijackers have data tracking capabilities that are used to monitor users' bro
Woso is a browser hijacker that promotes the quickgosearch.com fake search engine. Typically, software within this classification promotes fake search engines by making modifications to browser settings, however, Woso does not always have this behavior (see below). Additionally, Woso collects bro
Registry Helper is a rogue application, promoted as a tool capable of improving system performance by removal of registry errors, however, as most users download/install this app unintentionally, it is classified as a Potentially Unwanted Application (PUA). Software within this classification is
The main purpose of browser hijackers is to force people to visit specific addresses and use fake search engines. Commonly, apps of this type also gather data relating to internet browsing activities. DirectSportSearch is used to promote directsportsearch.com in this way. Users often download and
Silver Sparrow is a malicious program targeting Mac OS operating systems. There are two versions of this malware, the key difference being the targeted OS architecture. Silver Sparrow's activity has been observed in the United States, United Kingdom, Canada, France, and Germany. This malware is
Belonging to the Dharma ransomware family, Pauq is a malicious program. This ransomware operates by encrypting data to make ransom demands for decryption. In simple terms, it renders files inaccessible and demands payment to regain access. During the encryption process, affected files are renamed
Scammers behind 'sextortion' emails threaten recipients that they will send humiliating videos, photos, or other compromising content to friends, coworkers, family, social network contacts, etc., unless a ransom is paid (usually in Bitcoins). Typically, scammers claim to have infected computers w
Bk is a malicious program, which is part of the Dharma ransomware family. Systems infected with this malware have their data encrypted (i.e., rendered inaccessible and useless), and victims receive ransom demands for decryption. During the encryption process, all affected files are renamed follow
AlumniLocker was discovered by dnwls0719. Cybercriminals use ransomware to prevent victims from accessing their files (or devices) and demand ransom payments to regain access. Typically, ransomware encrypts and renames files and creates (or displays) a ransom message. AlumniLocker appends the ".a