HENRI IV is a malicious program, which is part of the Paradise ransomware family. Systems infected with this malware experience data encryption (i.e., stored files are rendered inaccessible/useless) and victims receive ransom demands for decryption. When HENRI IV ransomware encrypts, affected fil
M.0.A.B. ransomware is a type of malware that prevents victims from accessing their personal files and demands ransom payments. Different ransomware variants often append their extensions to filenames of files encrypted by them, however, M.0.A.B. leaves the original filenames unaffected - it simp
"Google Membership Rewards" is a scam presented as a prize raffle. The scheme claims that, should users select the correct answers to the following multi-choice questions, they will win a prize worth up to US$1099 (USD). The fraudulent gift giveaway is supposedly a show of gratitude for users' su
viketohelp[.]online is an untrusted website designed to promote other pages of this kind or load dubious content. The internet is full of websites like viketohelp[.]online and some examples are thenicenewz[.]com, leasedtohe[.]biz, and ablotadom[.]com. Typically, users do not visit these sites int
Ransomware-type malware encrypts files so that victims cannot use or access them without valid decryption keys/programs purchased from the attackers. VIPxxx also renames files by appending the victim's ID, cmd_bad@keemail.me email address, and the ".VIPxxx" extension to filenames. For example, "1
omarona[.]com is a rogue website, sharing common traits with thenicenewz.com, leasedtohe.biz, pu.biz, and countless others. Visitors to this page are presented with dubious content and are redirected to other untrusted/malicious sites. Most users access omarona[.]com and similar websites inadvert
Ransomware is a type of malware that blocks access to data by encryption and keeps it inaccessible unless victims use valid decryption software or keys. Ytbn encrypts files and appends the ".ytbn" extension to filenames. For example, "1.jpg" is renamed to "1.jpg.ytbn", "2.jpg" to "2.jpg.ytbn", an
thenicenewz[.]com is a rogue website designed to deliver dubious content and redirect visitors to other untrusted/malicious pages. The internet is full of rogue web pages including leasedtohe.biz, ablotadom.com, and pu.biz (just some examples). Users rarely access sites of this kind intentionally
leasedtohe[.]biz is an untrusted website, sharing many similarities with pu.biz, news-central.org, hanksforyou.biz, and countless others. This web page presents visitors with dubious material and redirects them to other rogue/malicious sites. Typically, leasedtohe[.]biz and similar websites are a
An information stealer is a type of malware that is designed to gather login information (e.g., usernames, passwords), credit card details, bank account numbers, or other sensitive information that the attackers can monetize in various ways. Cypress is an information stealer that targets a wide r