Bird Miner is malicious software that uses computer resources to mine cryptocurrency via emulation. Research shows that it runs two miners and, therefore, it consumes extensive resources. Cyber criminals distribute Bird Miner using an installer for a 'cracked' (pirated) version of ValhallaVintag
Discovered by Jakub Kroustek, FLYU is a malicious program, which is part of the Dharma ransomware family. This malware is designed to encrypt data and demand payment for decryption. During the encryption process, all affected files are renamed following this pattern: original filename, unique ID
search.productivebrowser.com is the address of a fake search engine. Generally, these sites are promoted through potentially unwanted applications (PUAs) classified as browser hijackers, adware-type apps. Apps of this type promote fake search engines by changing browser settings and hijacking br
mommaskids[.]com is a rogue website designed to present visitors with dubious material and/or redirect them to other bogus or possibly malicious web pages. There are thousands of sites similar to mommaskids[.]com on the web including, for example, thedailynews.report, directbase.ru, yourtopnews.co
Moss belongs to a ransomware family called Djvu. It encrypts files, modifies their filenames by appending its extension, and creates the "_readme.txt" file (the ransom message with instructions about how to contact the developers and other details) in all folders that contain encrypted files. Mos
Searchgoose.com is the address of a fake search engine. Most fake search engines are promoted by unwanted applications that are classified as browser hijackers. Therefore, if a browser opens searchgoose.com, this indicates that a browser hijacker is installed on it. Most users download and insta
Covid is malicious software classified as a 'stealer'. As the classification implies, this malware steals information. Stealers can employ various functionality to stealthily obtain data from infected systems. This Covid malware is highly dangerous, and thus infections must be eliminated immediate
thedailynews[.]report is a rogue website sharing many similarities with yourtopnews.com, news-back.net, locompany.club, and countless others. Visitors to this site are presented with dubious content and/or are redirected to other untrusted or possibly malicious web pages. Typically, these sites a
directbase[.]ru functions in a similar manner to justmedia24[.]biz, watch-video[.]net, news06[.]biz, and many other rogue websites. It can open untrusted, potentially malicious pages or display dubious content. Commonly, browsers open sites such as directbase[.]ru due to potentially unwanted appl
DLM (Download Manager) is a legitimate Mac application, which can be used to manage/organize downloads. I.e., to control download bandwidth, improve speed, and prioritize and schedule downloads. In fact, cyber criminals distribute this app with browser hijackers, adware-type apps and other poten