Discovered by Michael Gillespie, FUSION is a malicious program and part of the Nefilim ransomware family. This program is designed to rename encrypted files by adding the ".FUSION" extension. For example, "1.jpg" is renamed to "1.jpg.FUSION", "2.jpg" to "2.jpg.FUSION", and so on. It also creates
PDFSearchHD is a browser hijacker because it promotes a fake search engine (pdfsearchhd.com) by changing certain browser settings. It is also likely to collect browsing data. Note that browser hijackers are classified as potentially unwanted applications (PUAs), since users often download and inst
"POWERBALL OFFICIAL 2020 WINNINGS" is an email phishing spam campaign. The term "spam campaign" refers to a mass-scale operation, during which thousands of deceptive emails are sent. The messages distributed through the "POWERBALL OFFICIAL 2020 WINNINGS" spam campaign are disguised as official ma
Thcuhswza belongs to the Snatch ransomware family. It renames every file that it has encrypted and creates a ransom message in all folders that contain encrypted files. Thcuhswza renames files by appending the ".thcuhswza" extension to filenames. For example, "1.jpg" is renamed to "1.jpg.thcuhswza
Search-Streamly promotes search-streamly.com, a fake search engine. Like most apps of this type, it achieves this by changing certain browser settings. Additionally, it might be designed to gather information relating to users' browsing activities and other details. Frequently, users download and
OperativeSync is an adware-type application with browser hijacker traits. Following successful installation, it runs intrusive advertisement campaigns and makes modifications to browser settings to promote bogus search engines. On Google Chrome browsers, OperativeSync promotes search.basicgenera
Acuff belongs to the Phobos ransomware family. Malware of this type is designed to encrypt data, rename each encrypted file, and generate ransom messages. This particular ransomware program renames encrypted files by adding the victim's ID, the unlockfiles2021@cock.li email address to filenames, a
RXD is a malicious program and part of the Dharma ransomware family. It blocks access to files by encryption, renames each encrypted file, and provides instructions about how to contact the developers regarding data decryption. RXD renames files by adding the victim's ID, the debri@keemail.me emai
Generally, scammers behind email scams such as this one attempt to trick recipients into believing that they are beneficiaries of a will, life insurance policy, etc. Scammers ask recipients to contact them and provide various information. At some point, recipients are asked to pay a processing fee
Termit belongs to the Dcrtr ransomware family. Like most programs of this type, Termit encrypts files, renames them, and creates a ransom message. It renames files by adding the ashtray@outlookpro.net email address and appending the ".termit" extension to filenames. For example, "1.jpg" is rename