JamesBond is a ransomware-type program. It locks victims' files through encryption and demands payment for the data recovery (decryption). During the encryption process, files are appended with a ".jamesbond2021@tutanotacom_jamesbond" extension. For example, a file named "1.jpg" would appear as "1
Belonging to the VoidCrypt ransomware family, Cracker is a malicious program designed to encrypt data (render files inaccessible) and demand payment for the decryption. Compromised files are renamed according to this pattern: original filename, cyber criminals' email address, unique ID assigned t
Thehomesail[.]com loads deceptive content, asks for permission to display/show notifications, and opens shady pages. Thehomesail[.]com is like apsolutamente[.]org, mobsuitem[.]com, l-o-a-d-i-n-g[.]biz and lots of other pages. Pages of this type are promoted through other dubious pages, shady ads,
ModuleService is an adware-type app with browser hijacker traits. Furthermore, software products within these categories are also considered to be PUAs (Potentially Unwanted Applications). Adware enables the placement of third-party graphical content (e.g., pop-ups, banners, surveys, and
Wiot belongs to the Djvu ransomware family. It prevents victims from accessing their files by encrypting them and appends the ".wiot" extension to each encrypted file's filename. For example, Wiot renames "1.jpg" to "1.jpg.wiot", "2.jpg" to "2.jpg.wiot", and so on. It also creates the "_readme.txt
MacFly Pro is advertised as a simple and powerful app that that assists Mac maintenance, however, it is likely that this app is promoted using dubious methods. I.e. some users might download and install MacFly Pro inadvertently. These apps are classified as potentially unwanted applications (PUA
When cybercriminals use emails to deliver malware, they send malicious attachments or website links. Their main goal is to trick recipients into opening a file designed to install malicious software. Cybercriminals behind this email are pretending to be Interhydro (a legitimate French company). Th
Nuthab is a browser hijacker promoting the nuthab.com fake search engine. Due to the questionable techniques used to distribute browser hijackers, they are also classified as PUAs (Potentially Unwanted Applications). Nuthab assigns nuthab.com as browsers' homepage, default search engine, a
Apsolutamente[.]org is a rogue site similar to mobsuitem.com, haenkyouv.space, typiccor.com, and thousands of others. It operates by loading dubious content and/or redirecting visitors to various (likely unreliable or malicious) webpages. Users usually access rogue websites inadvertently via redir
Pagar ransomware is designed to encrypt files on a device and keep them inaccessible until a ransom is paid. Also, Pagar appends the ".pagar40br@gmail.com" extension to filenames (for example, it renames "1.jpg" to "1.jpg.pagar40br@gmail.com", "2.jpg" to "2.jpg.pagar40br@gmail.com") and creates th