protectad[.]online is a deceptive web page designed to promote various scams. The schemes run on this site mainly target iPhone users (but might be accessed via other Apple devices). At the time of research, the website promoted a scam claiming that users' iPhones were exposed to malware and adw
Typically, scammers behind phishing emails attempt to trick recipients into installing malware or providing sensitive information. They send emails containing malicious attachments (or download links for malicious files) or links designed to open deceptive websites asking to enter/provide personal
Part of the Dharma ransomware family, Four is a malicious program. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. When this ransomware encrypts, affected files are renamed following this pattern: original filename, unique ID assigned
tionscalen[.]top is one of many deceptive websites that use a scare tactic to trick users into believing they must download and install (sometimes even buy) a potentially unwanted application (PUA). One common tactic used by tionscalen[.]top and similar pages to trick unsuspecting into unnecess
HDSportsSearch is rogue software categorized as a browser hijacker. Following successful installation, it makes changes to browser settings to promote the hdsportssearch.com fake search engine. Furthermore, most browser hijackers have data tracking capabilities that are used to monitor users' bro
Woso is a browser hijacker that promotes the quickgosearch.com fake search engine. Typically, software within this classification promotes fake search engines by making modifications to browser settings, however, Woso does not always have this behavior (see below). Additionally, Woso collects bro
Registry Helper is a rogue application, promoted as a tool capable of improving system performance by removal of registry errors, however, as most users download/install this app unintentionally, it is classified as a Potentially Unwanted Application (PUA). Software within this classification is
The main purpose of browser hijackers is to force people to visit specific addresses and use fake search engines. Commonly, apps of this type also gather data relating to internet browsing activities. DirectSportSearch is used to promote directsportsearch.com in this way. Users often download and
Silver Sparrow is a malicious program targeting Mac OS operating systems. There are two versions of this malware, the key difference being the targeted OS architecture. Silver Sparrow's activity has been observed in the United States, United Kingdom, Canada, France, and Germany. This malware is
Belonging to the Dharma ransomware family, Pauq is a malicious program. This ransomware operates by encrypting data to make ransom demands for decryption. In simple terms, it renders files inaccessible and demands payment to regain access. During the encryption process, affected files are renamed