Geneve is the name of a ransomware-type malicious program. Systems infected with this malware experience data encryption and users receive ransom demands for decryption tools/software. When Geneve encrypts, it appends all affected files with a random extension. For example, a file originally name
heiipiossuport[.]info is a deceptive website promoting various scams. At the time of research, this site ran a scam targeting iPhone users, however, heiipiossuport[.]info can also be accessed through other Apple products. This scheme has many similarities with technical support scams. It claims
PracticalSystem is classified as adware and a browser hijacker: this app serves advertisements and promotes fake search engines (0yrvtrh.com and search.dominantmethod.com) by changing certain browser settings. PracticalSystem can also read sensitive information from websites. It is categorized
Fresh ransomware encrypts files, renames them, displays a pop-up window with instructions about how to contact the developers, and creates the "FILES ENCRYPTED.txt" file (another ransom message). It renames files by adding the victim's ID, freshkart@420blaze.it email address, and appending the ".f
VirtualCharacterSearch is a potentially unwanted application (PUA) which functions not only as adware but also as a browser hijacker. Therefore, it serves advertisements and changes certain browser settings to promote the address of a fake search engine. It might also be designed to gather brow
ytdownload[.]net is an untrusted website offering YouTube video conversion to MP3 and MP4 file download services. This site infringes copyright laws and uses rogue advertising networks. Therefore, when ytdownload[.]net is visited and/or used, it causes redirects to various dubious and even malicio
news06[.]biz is a rogue website, sharing many similarities with opertisticolk.club, atharori.net, lokpresearch.club and thousands of others. Sites of this type present visitors with dubious content and/or redirect them to other untrusted or even possibly malicious web pages. Most users access the
bifidavity[.]club is the address of an untrusted website which, once visited, opens other pages of this kind or loads dubious content. There are many websites similar to bifidavity[.]club online. Some examples are cloystercdn[.]com, meetclick[.]biz and tiktok-news[.]com. Typically, users do not v
BubblePDF promotes fake search engine addresses (hp.bubblepdf.com and find.bubblepdf.com) by changing certain browser settings. It can also access data on the system. Generally, users do not download or install browser hijackers intentionally and, for this reason, apps such as BubblePDF are classi
FinSpy is spyware used to log keystrokes, record audio via microphones and video via webcams, execute remote shell commands, and extract system information and other data. Therefore, cyber criminals can use this spyware for spying, stealing data and remotely controlling infected computers.