The "U.S. Small Business Administration" email is part of yet another spam campaign exploiting the Coronavirus/COVID-19 pandemic. Supposedly from the US Small Business Administration (SBA), the emails are disguised as containing information regarding the Paycheck Protection Program, Economic Inju
TopicFirst is a potentially unwanted application (PUA), an adware-type app supposedly designed to improve the browsing experience. In fact, it feeds users with advertisements, promotes Safe Finder (by opening it via akamaihd.net) and might also gather information. Users often download and instal
Hupigon is a Remote Access Trojan (RAT). Malware of this type allows almost user-level access and control over the infected device. RATs can have capabilities that enable likewise varied misuse. In the case of Hupigon, as well as granting access/control, it also has significant information-stealin
Discovered by Michael Gillespie, Shootlock is a malicious program and a new Makop ransomware variant. This malware encrypts data of the infected system to demand ransom payments for decryption tools/software. When Shootlock ransomware encrypts data, all affected files are renamed according to the
BazarBackdoor was developed by the cyber criminals who developed TrickBot. They use this 'backdoor' malware as a tool to compromise infected networks. They might also use it to attack regular users. In most cases, threat actors use software such as BazarBackdoor to steal sensitive, financial data,
Like most browser hijackers, Translations Instant assigns certain browser settings to the address of a fake search engine (to promote it). In this case, it sets them to translationsinstanthtab.com. Commonly, apps of this type record various user-system information (typically, browsing-related deta
Easy News Now is advertised as an app which provides quick access to various news-related web pages, however, this is a potentially unwanted application (PUA) classified as adware. Easy News Now serves advertisements and might collect browsing-related (and other) information. Adware-type apps are
Search Sherpa is a browser hijacker. This piece of software modifies browser settings to promote search-sherpas.com, a fake search engine. Furthermore, it possesses data tracking capabilities employed to monitor users' browsing activity. Due to its dubious proliferation methods, Search Sherpa is a
Zorgo is a malicious ransomware-type program based on HiddenTear. It is designed to encrypt the data of infected systems in order to demand payment for decryption. During the encryption process, all affected files are appended with the ".zorgo" extension. For example, a file originally named some
InteractivePremium is a rogue application classified as adware. It runs intrusive advertisement campaigns. Additionally, it has browser hijacker characteristics. InteractivePremium modifies browsers to promote bogus search engines. This app promotes Safe Finder via akamaihd.net. Most adware typ