MONETA belongs to the Phobos ransomware family. It encrypts victims' files, renames them, displays a pop-up window, and creates the "info.txt" text file. MONETA adds the victim's ID, ICQ username, and appends the ".MONETA" extension to the filenames of encrypted files. For example, "1.jpg" is ren
GetConverterSearch is classified as a browser hijacker because it modifies browser settings without users' knowledge. I.e., it forces people to use a fake search engine (visit getconvertersearch.com). Typically, users download and install browser hijackers inadvertently and, therefore, they are ca
Like many other similar websites (e.g., news06[.]biz, bifidavity[.]club, opertisticolk[.]club), watch-video[.]net is designed to promote/open other untrusted sites and display dubious content. Commonly, browsers open these websites when PUAs are installed on them, or when users click deceptive adv
Chrome Tools is rogue software classified as adware. Following successful installation, it operates by running intrusive advertisement campaigns. I.e., Chrome Tools delivers various dubious and harmful ads. Additionally, this adware has data tracking capabilities, which are used to collect browsi
UltraSearchApp is a rogue application belonging to the AdLoad adware family. This app has adware-type and browser hijacker traits. UltraSearchApp runs intrusive advertisement campaigns (i.e., delivers various unwanted and even dangerous ads). It can also alter browser settings to promote a fake
Generally, users do not open pages such as nlyimprese[.]fun intentionally - they are opened when they click dubious ads, visit dubious pages, or when installed potentially unwanted applications (PUAs) open them. Note that there are many web pages similar to nlyimprese[.]fun online. Some examples a
Adrozek is a malicious browser modifier, classified as adware. It operates by infiltrating browsers and injecting untrusted and malicious ads into them, however, it can do more damage than just running intrusive advertisement campaigns. This software collects information extracted from browsers a
GlobalSearchConverter is a typical browser hijacker - it promotes a fake search engine. More precisely, it modifies certain browser settings (changing them to globalsearchconverter.com. GlobalSearchConverter also collects browsing data. Note that in most cases users download and install browser h
GlobalPDFConverterSearch is rogue software. Following successful infiltration, it makes modifications to browser settings to promote globalpdfconvertersearch.com (a fake search engine). Due to this, it is classified as a browser hijacker. Additionally, GlobalPDFConverterSearch collects browsing-r
Leitkcad ransomware encrypts victims' files, renames them by appending the ".leitkcad" extension to filenames, and creates the "help-leitkcad.txt" text file (ransom message). For example, "1.jpg" is renamed to "1.jpg.leitkcad", "2.jpg" to "2.jpg.leitkcad", and so on. Note that Leitkcad is similar