messages-email[.]com is a rogue website that shares similarities with netflowgroup.com, theactualnewz.com, newsfeedzscrollz.com, and thousands of others. Visitors to them are presented with dubious material and/or are redirected to other untrusted/malicious sites. People often visit messages-emai
Websites such as app-department[.]report commonly display pop-up windows and/or show messages warning visitors that their devices have viruses, and that they must click a link to download and install an application to remove them. I.e., app-department[.]report is one of many deceptive pages that
protectad[.]online is a deceptive web page designed to promote various scams. The schemes run on this site mainly target iPhone users (but might be accessed via other Apple devices). At the time of research, the website promoted a scam claiming that users' iPhones were exposed to malware and adw
Typically, scammers behind phishing emails attempt to trick recipients into installing malware or providing sensitive information. They send emails containing malicious attachments (or download links for malicious files) or links designed to open deceptive websites asking to enter/provide personal
Part of the Dharma ransomware family, Four is a malicious program. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. When this ransomware encrypts, affected files are renamed following this pattern: original filename, unique ID assigned
tionscalen[.]top is one of many deceptive websites that use a scare tactic to trick users into believing they must download and install (sometimes even buy) a potentially unwanted application (PUA). One common tactic used by tionscalen[.]top and similar pages to trick unsuspecting into unnecess
HDSportsSearch is rogue software categorized as a browser hijacker. Following successful installation, it makes changes to browser settings to promote the hdsportssearch.com fake search engine. Furthermore, most browser hijackers have data tracking capabilities that are used to monitor users' bro
Woso is a browser hijacker that promotes the quickgosearch.com fake search engine. Typically, software within this classification promotes fake search engines by making modifications to browser settings, however, Woso does not always have this behavior (see below). Additionally, Woso collects bro
Registry Helper is a rogue application, promoted as a tool capable of improving system performance by removal of registry errors, however, as most users download/install this app unintentionally, it is classified as a Potentially Unwanted Application (PUA). Software within this classification is
The main purpose of browser hijackers is to force people to visit specific addresses and use fake search engines. Commonly, apps of this type also gather data relating to internet browsing activities. DirectSportSearch is used to promote directsportsearch.com in this way. Users often download and