Leex ransomware variant belongs to the Djvu ransomware family. It encrypts files, appends its extension (".leex") to their filenames and creates the "_readme.txt" file as its ransom note. Leex renames encrypted files in this manner: it renames a file named "1.jpg" to "1.jpg.leex", "2.jpg" to "2.jp
NetworkSync is a rogue app. It is classified as adware and has browser hijacker qualities. Following successful installation, this piece of software runs intrusive advertisement campaigns and promotes fake search engines by making modifications to browser settings. Additionally, adware and brow
It is popular among cybercriminals to distribute malware by hiding it inside cracked software. It is known that Crackonosh is distributed alongside cracked popular games and other software. The main purpose of Crackonosh is to install the XMRIG miner and mine cryptocurrencies for the attackers.
Neer is a piece of malicious software belonging to the Djvu ransomware family. Systems infected with this malware experience data encryption (files are rendered inaccessible) and receive ransom demands for the decryption (access recovery). During the encryption process, affected files are appende
Retressive[.]website is the URL of a rogue site, which shares many common traits with byluxrayor.com, deeepmedia.biz, trking.xyz, and thousands of others. It is designed to load questionable content and/or redirect visitors to different untrustworthy or possibly malicious pages. Rogue webpages ar
Dictionary Search is a browser hijacker endorsed as an easy access tool to online dictionaries. Typically, software within this category makes alterations to browser settings in order to promote fake search engines. In some cases, Dictionary Search modifies browsers to promote togosearching.com,
Level1 ransomware encrypts and renames files and generates multiple text files containing the same ransom demanding message. It renames files by replacing their names with a string of random characters and their extensions with ".level1" extension (for example, it renames "1.jpg" to "1.jpg.E19C42o
Rxqcpjoai is a piece of malicious software belonging to the Snatch ransomware group. It operates by encrypting data (locking files) and demands payment for the decryption (access recovery to the data). During the encryption process, affected files are appended with the ".rxqcpjoai" extension. For
Byluxrayor[.]com is designed to open questionable pages and display deceptive content (byluxrayor[.]com does one or the another after checking visitor's IP address). It is very common for websites of this type to be promoted through other pages pf this kind, potentially unwanted applications (PUAs
Sharing many similar traits with trking.xyz, convmusic.com, 1music-online.me, and thousands of others, deeepmedia[.]biz is a rogue website. It operates by presenting visitors with dubious material and/or redirecting them to different unreliable and possibly malicious webpages. Users usually acces