MessedUp is part of the Phobos ransomware family. It encrypts files, modifies their filenames, displays a ransom message and creates a text file (containing another ransom message). MessedUp renames encrypted files by adding the victim's ID, ICQ username (to contact the developers), and appending
Typically, users arrive at web pages such as samizdat-philosophy[.]com via deceptive ads, untrusted pages or when they are opened by potentially unwanted applications (PUAs) installed on browsers or operating systems. Note that PUAs can display ads and gather certain information (e.g., browsing da
revoluciondron[.]com is an untrusted website with many similarities to critical-alert.info, myfreshposts.com, vildq.com, ngcomunicazione.com and countless others. Visitors to this page are presented with dubious content and/or are redirected to other bogus/malicious sites. Few users enter revoluc
houstontexansteamstore[.]com is a rogue web page sharing common features with critical-alert.info, espublicaldru.info, doswinuba.com and thousands of others. It presents visitors with dubious content and/or redirects them to other untrusted or possibly malicious sites. Typically, users access web
Users are often forced to visit pushmoder[.]com, since these sites are opened by potentially unwanted applications (PUAs), which people have installed onto their browsers and/or computers inadvertently. Commonly, PUAs serve ads and collect data. They are classified as PUAs because users do not dow
Sharing many similarities with espublicaldru.info, doswinuba.com, vildq.com and thousands of others, critical-alert[.]info is a rogue website. Visitors are presented with dubious content and/or are redirected to other dubious or possibly malicious pages. Few users access these web pages intention
WebNewSearch is a potentially unwanted application (PUA), which functions as adware and a browser hijacker: it serves advertisements and promotes the address of a fake search engine. Additionally, it might be designed to collect data. Apps like WebNewSearch are classified as PUAs because, in mos
Easy2Lock prevents victims from accessing/using their files by encryption, renames the files, and creates a ransom message for each encrypted file. It renames files by appending the ".easy2lock" extension. For example, "1.jpg" is renamed to "1.jpg.easy2lock", "2.jpg" to "2.jpg.easy2lock", and so o
Discovered by Michael Gillespie, MadDog is a ransomware-type malicious program. It is based on the Hidden Tear (HiddenTear) open-source project. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption. When MadDog encrypts, all affected files a
Generally, users do not visit pages such as espublicaldru[.]info intentionally - they are opened by browsers that have potentially unwanted applications (PUAs) installed on them. PUAs are designed to open sites such as espublicaldru[.]info, serve advertisements, and collect data. They are classif