ResultsSearchTool promotes a fake search engine by changing browser settings. It also displays advertisements. Therefore, this app functions both as adware and a browser hijacker. Commonly, apps of this type collect browsing-related and other data. Note that ResultsSearchTool is distributed thr
Discovered by GrujaRS, Gdjlosvtnib is malicious software (malware) belonging to the Snatch ransomware family. Systems infected with this ransomware experience data encryption and users receive ransom demands for decryption. During the encryption process, all affected file are appended with the ".g
VanTom is a Remote Access Trojan (RAT) based on njRat malware. Malicious programs classified as RATs allow remote access and control over an infected machine. These Trojans can have a wide variety of functionalities, which can enable likewise varied misuse. The VanTom RAT is a highly dangerous pi
VideozSearchs hijacks browsers by changing settings to feed.videoz-searchs.com (the address of a fake search engine). Additionally, this app might be designed to collect data relating to users' browsing habits. Generally, people download and install these apps unintentionally and, for this reason,
Discovered by GrujaRS, TELEGRAM is a new variant of NEFILIM ransomware. Systems infected with this ransomware have their data encrypted and users receive ransom demands for decryption. During the encryption process, all affected files are appended with the ".TELEGRAM" extension. For example, a fi
SearchConverterz is a typical browser hijacker - it promotes a fake search engine by changing certain browser settings (in this case, assigning them to feed.searchconverterz.com). These apps also gather browsing-related information. Users often download and install browser hijackers inadvertently
Typically, malspam campaigns are disguised as legitimate and official in attempts to make them seem less suspicious. Cyber criminals send bogus emails to trick recipients into clicking the included link (thereby downloading and opening a malicious file) or simply opening/executing the attached fi
This untrusted website displays a deceptive notification stating that the computer is infected with viruses and attempts to scare users into downloading and installing potentially unwanted applications (PUAs). Typically, these web pages are opened when users visit other dubious websites, click bo
Cyber criminals behind this malspam campaign attempt to deceive recipients into believing that they have purchased a certain sum of Bitcoins and that opening the attached document supposedly contains more information about the purchase. In fact, the attached document is malicious and designed to i
Tabe is a malicious program belonging to the Djvu ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption tools/software. During the encryption process, all affected files are appended with the ".tabe" extension. For example