Belonging to the Dharma ransomware family, Sss renames encrypted files by adding the victim's ID, m5b92n5p1@mail.com email address, and appending the ".sss" extension to filenames. For example, "1.jpg" is renamed to "1.jpg.id-C279F237.[m5b92n5p1@mail.com].sss", "2.jpg" to "2.jpg.id-C279F237.[m5b92
ZqVIkE is ransomware-type program based on the Hidden Tear (HiddenTear) open-source project. Systems infected with this type of malware experience data encryption and users receive ransom demands for decryption. Note that ZqVIkE is still in development, and thus might not encrypt all of files stor
This ransomware belongs to the VoidCrypt ransomware family. Like most malicious programs of this type, Mpmp encrypts files and renames them. It also generates a ransom message with instructions about how to contact the developers. Mpmp renames encrypted files by adding the mpdecoder@gmail.com ema
24-support-global[.]expert is a deceptive web page that promotes various scams. At the time of research, this site was observed promoting several versions of the "Your Apple iPhone is severely damaged" scam and one stating that users need to download a VPN application to continue watching conten
Like many other websites of this kind, mobile-detection[.]com promotes a potentially unwanted application (PUA) by claiming that use of the app will remove viruses, which have supposedly been detected by the site. In summary, websites such as mobile-detection[.]com promote software in deceptive
Belonging to the Djvu ransomware family, Epor is designed to encrypt files, modify their filenames, and create a ransom message. Epor renames files by appending the ".epor" extension to filenames. For example, "1.jpg" is renamed to "1.jpg.epor", "2.jpg" to "2.jpg.epor", and so on. It also creates
"Mac OS Alert" is a scam promoted on various deceptive websites. This scheme claims that visitors' devices may be infected and recommends a quick scan. The fake scan then details several nonexistent viruses and states that the anti-virus suite must be updated. No web page can detect threats/issu
CRAT is a Remote Access Trojan (RAT), a form of malware that allows cyber criminals to control infected devices remotely. Research shows that this RAT (depending on its version) can be used to access and control computers and to download and install additional malicious components allowing it to
IStreamingSearch is rogue software classified as a browser hijacker. Following successful installation, it makes alterations to browser settings to promote istreamingsearch.com (a fake search engine). Additionally, IStreamingSearch has data tracking capabilities, which are used to monitor users' b
There are many websites similar to oc-protection[.]com on the internet. Generally, they display fake virus notifications to trick users into installing potentially unwanted applications (PUAs), which remove viruses supposedly detected on devices by the web pages. Note that users do not often vi