EnCryp13d is typical ransomware, which encrypts and renames files and demands ransom payments. It renames files by appending the ".EnCryp13d" extension. For example, "1.jpg" is renamed to "1.jpg.EnCryp13d", "2.jpg" to "2.jpg.EnCryp13d", and so on. EnCryp13d also displays a pop-up window and creat
go-mp3[.]com is a dubious website offering YouTube video conversion to MP3 file services. It allows users to convert and then download MP3 files from YouTube video URLs. Note that go-mp3[.]com infringes copyright laws and also uses rogue advertising networks. Therefore, visitors to such websites
LTC is a malicious program belonging to the Dharma ransomware family. This malware is designed to encrypt data and demand payment for decryption. During the encryption process, files are renamed following this pattern: original filename, unique ID assigned to the victims, cyber criminals' email a
The DigitalRecord app displays unwanted advertisements and changes browser settings to promote a fake search engine address. This app functions both as adware and as a browser hijacker. These apps often gather browsing-related (and other) information. Typically, users download and install Digit
Like most browser hijackers, SearchPDFConverter changes web browser settings without users' permission. In this case, it assigns them to searchpdfconverter.com (the address of a fake search engine). Furthermore, SearchPDFConverter collects browsing-related information. Generally, users do not dow
CheckEmailsQuicker is software endorsed as a tool for easy access to email accounts also capable of storing log-in credentials (i.e. usernames and passwords). Since it runs intrusive advertisement campaigns, however, CheckEmailsQuicker is classified as adware. Many users download/install this pro
Gdiview is a potentially unwanted application (PUA) that developers distribute via a dubious web page (possibly, multiple web pages). The exact purpose of Gdiview is unknown, however, it is likely that users who install this app will also have installed adware, a browser hijacker, or other PUA. T
Discovered by malware analyst 0x4143, Solaso is a ransomware-type program. Systems infected with this software experience data encryption and users receive ransom demands for decryption tools. During the encryption process, all affected files are appended with the ".solaso extension. For example,
"Stopped processing incoming emails" is a spam phishing campaign. This term refers to a mass-scale operation, during which thousands of deceptive/scam emails are sent. These messages claim that recipients' email accounts have been suspended and incoming mail is no longer reaching the inbox. To rec
There are many websites similar to peachlandcn[.]com on the web. Most display fake virus or other notifications stating that the device is infected (or that another problem exists) and suggests removal of viruses and protection of devices with potentially unwanted applications (PUAs), which can