CORONA LOCKER is a ransomware-type program, an updated variant of Aurora. It operates by encrypting the data stored on infected systems to demand ransoms for decryption. When CORONA LOCKER encrypts, files are appended with the ".systems32x" extension. For example, a file originally named somethin
Developers of apps such as SubVideoTube use deceptive tactics to distribute their apps. Users often download and install them inadvertently and, therefore, they are classified as potentially unwanted applications (PUAs). It is likely that the installer for SubVideoTube comes bundled with adware
artepigr[.]com is similar to maincaptchasource[.]com, vossulekuk[.]com, continue-site[.]site, and other rogue pages that show/load dubious content or open other bogus web pages. Users do not often open sites like artepigr[.]com intentionally - they are opened through deceptive ads, other dubious
Typically, users download and install browser hijackers inadvertently. Therefore, PDFSearchWeb and other applications of this kind are classified as potentially unwanted applications (PUAs). The main purpose of browser hijackers is to modify browser settings to promote specific addresses (fake se
BleachGap is a ransomware-type program. It operates by encrypting data and demanding payment for decryption. I.e., the files affected by BleachGap are rendered inaccessible and victims are asked to pay a ransom to regain access. During the encryption process, files are appended with the ".lck" ex
Information stealers are malware programs that can be designed to record keystrokes, take screenshots, and gather other data in order to send it to the attackers. Malware of this type can run stealthily in the background so that victims do not suspect infection. Ades is a stealer written in the C
DefaultTool is a piece of dubious software, which operates as adware and a browser hijacker. It delivers intrusive advertisements and promotes fake search engines by making changes to browser settings. Due to the dubious techniques used to proliferate DefaultTool, it is also categorized as a Pot
Usually, ransomware prevents victims from accessing their files or the entire system. It encrypts files and demands payment (typically, in Bitcoins) in exchange for a decryption tool (software, key). Urs encrypts files and adds the victim's ID, necurs@aol.com email address, and appends the ".urs"
OpticalUpdater is an adware-type application with browser hijacker traits. Following successful infiltration, it runs intrusive advertisement campaigns and promotes fake search engines by modifying browser settings. Additionally, most adware-types and browser hijackers collect browsing-related i
Belonging to the Dharma ransomware group, ORAL is a malicious program, which operates by encrypting data and demanding ransoms for decryption - victims cannot access the files affected by this ransomware and are informed that they must pay to unlock them. During the encryption process, files are