CTRM ransomware encrypts files and renames them. It also creates the "CTRM_INFO.rtf" file (ransom message) in all folders that contain encrypted files. CTRM renames files by replacing their filenames with the citrteam@yahoo.com email address, a string of random characters, and appending ".CTRM" as
Swat is malicious software belonging to the VoidCrypt ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption tools. When this ransomware encrypts, affected files are renamed following this pattern: original filename, cyber
cenesserie[.]fun is a rogue website sharing many similarities with indexspotcaptcha.com, nlyimprese.fun, atinterboa.space and countless others. Visitors to this page are presented with dubious content and are redirected to other untrustworthy or possibly malicious sites. Few visitors access cenes
AutoIncognitoSearch is classified as browser hijacker because it promotes autoincognitosearch.com, the address of a fake search engine by modifying certain browser settings. Furthermore, it is likely that this app also gathers information relating to web browsing activities. Typically, users do n
There are many websites similar to indexspotcaptcha[.]com on the internet. Some examples are nlyimprese[.]fun, atinterboa[.]space and tutupdate29[.]com. Note that users do not visit these web pages intentionally - they are opened by browsers with potentially unwanted applications (PUAs) installed
MONETA belongs to the Phobos ransomware family. It encrypts victims' files, renames them, displays a pop-up window, and creates the "info.txt" text file. MONETA adds the victim's ID, ICQ username, and appends the ".MONETA" extension to the filenames of encrypted files. For example, "1.jpg" is ren
GetConverterSearch is classified as a browser hijacker because it modifies browser settings without users' knowledge. I.e., it forces people to use a fake search engine (visit getconvertersearch.com). Typically, users download and install browser hijackers inadvertently and, therefore, they are ca
Like many other similar websites (e.g., news06[.]biz, bifidavity[.]club, opertisticolk[.]club), watch-video[.]net is designed to promote/open other untrusted sites and display dubious content. Commonly, browsers open these websites when PUAs are installed on them, or when users click deceptive adv
Chrome Tools is rogue software classified as adware. Following successful installation, it operates by running intrusive advertisement campaigns. I.e., Chrome Tools delivers various dubious and harmful ads. Additionally, this adware has data tracking capabilities, which are used to collect browsi
UltraSearchApp is a rogue application belonging to the AdLoad adware family. This app has adware-type and browser hijacker traits. UltraSearchApp runs intrusive advertisement campaigns (i.e., delivers various unwanted and even dangerous ads). It can also alter browser settings to promote a fake