Crypt is a malicious program belonging to the Dharma ransomware group. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, files are renamed following this pattern: original filename, unique ID assigned to th
Chromium Shield is a rogue browser based on a legitimate, open-source project called Chromium. This piece of software is endorsed as supposedly capable of providing safe, secure and fast browsing. Amongst its listed features are: free VPN; advertisement blocking; protection against tracking, surv
MessedUp is part of the Phobos ransomware family. It encrypts files, modifies their filenames, displays a ransom message and creates a text file (containing another ransom message). MessedUp renames encrypted files by adding the victim's ID, ICQ username (to contact the developers), and appending
Typically, users arrive at web pages such as samizdat-philosophy[.]com via deceptive ads, untrusted pages or when they are opened by potentially unwanted applications (PUAs) installed on browsers or operating systems. Note that PUAs can display ads and gather certain information (e.g., browsing da
revoluciondron[.]com is an untrusted website with many similarities to critical-alert.info, myfreshposts.com, vildq.com, ngcomunicazione.com and countless others. Visitors to this page are presented with dubious content and/or are redirected to other bogus/malicious sites. Few users enter revoluc
houstontexansteamstore[.]com is a rogue web page sharing common features with critical-alert.info, espublicaldru.info, doswinuba.com and thousands of others. It presents visitors with dubious content and/or redirects them to other untrusted or possibly malicious sites. Typically, users access web
Users are often forced to visit pushmoder[.]com, since these sites are opened by potentially unwanted applications (PUAs), which people have installed onto their browsers and/or computers inadvertently. Commonly, PUAs serve ads and collect data. They are classified as PUAs because users do not dow
Sharing many similarities with espublicaldru.info, doswinuba.com, vildq.com and thousands of others, critical-alert[.]info is a rogue website. Visitors are presented with dubious content and/or are redirected to other dubious or possibly malicious pages. Few users access these web pages intention
WebNewSearch is a potentially unwanted application (PUA), which functions as adware and a browser hijacker: it serves advertisements and promotes the address of a fake search engine. Additionally, it might be designed to collect data. Apps like WebNewSearch are classified as PUAs because, in mos
Easy2Lock prevents victims from accessing/using their files by encryption, renames the files, and creates a ransom message for each encrypted file. It renames files by appending the ".easy2lock" extension. For example, "1.jpg" is renamed to "1.jpg.easy2lock", "2.jpg" to "2.jpg.easy2lock", and so o