M88P encrypts files and changes the filename of each encrypted file by replacing it with the marco88Polo@criptext.com email address, a string of random characters, and the ".M88P" extension. For example, "1.jpg" is renamed to "[Marco88Polo@criptext.com].2dTJHVkP-KGU2jY25.M88P", "2.jpg" to "[Marco
fast2captcha[.]com is similar to myniceposts[.]com, fastsolvecaptcha[.]com, kersatur[.]online, and many other web pages. Note that users do not often visit these pages intentionally - they are opened by installed potentially unwanted applications (PUAs), through other bogus web pages, or via dubio
A popular method used by cyber criminals to deliver malware is to send emails that contain a malicious attachment or download link for a malicious file. Usually, these emails are disguised official, important messages from legitimate companies and organizations. The main purpose of these emails i
TeslaRVNG1.5 belongs to the Ouroboros ransomware family. This ransomware encrypts files and renames them by prepending the victim's ID, tesla369@cock.li email address, and appending ".teslarvng1.5" extension to their filenames (an updated variants use the ".teslarvng2" and ".teslarvng3" extensions
ActivityConfig functions as adware and also as a browser hijacker: it generates advertisements modifies browser settings to promote a fake search engine. It is also likely that this app gathers browsing-related and/or other information. Note that users often download and install ActivityConfig
RansomExx encrypts files and modifies their filenames by appending a specific extension, which depends on the target name (for example, the name of the organization). Cyber criminals have used this ransomware to attack the Texas Department of Transportation. In this case, encrypted files had the
There are many technical support scam websites claiming to be official Microsoft (or other company) websites and claiming that the computer is blocked, infected, or another problem needs to be solved immediately. Commonly, these web pages display pop-up windows instructing potential victims to ca
Streaming plus is a browser hijacker that promotes quicknewtab.com, a fake search engine. Typically, apps of this type promote fake search engines by changing browser settings without users' permission. Browser hijackers also collect browsing data and other information. In most cases, users down
myniceposts[.]com is similar to fastsolvecaptcha[.]com, kersatur[.]online, yourwownewz[.]com, and many other rogue websites: it loads dubious content and promotes other websites of this kind. Users often visit sites such as myniceposts[.]com unintentionally - they are opened by installed potential
The rogue program was discovered by MalwareHunterTeam. As its name suggests, screen-locker ransomware is a type of malware that prevents victims from accessing the operating system by locking the screen. It then demands payment to unlock the screen. This particular screen locker displays a full-s