GravityRAT is malware classified as spyware: it allows cyber criminals to steal certain data from infected devices. The cyber criminals behind this malware target Windows, macOS and Android users. If there is reason to believe that GravityRAT is installed on your computer or mobile telephone, remo
"This computer is blocked" is a tech support scam, a fake virus alert that occurs only when visiting an untrustworthy/deceptive website. Typically, users do not visit websites of this type intentionally - potentially unwanted applications (PUAs) redirect them to it. As well as redirects to decept
Elder is malicious software belonging to the Phobos ransomware family. It is designed to encrypt data and keep it inaccessible until a ransom is paid (i.e., decryption software/tool is purchased). When Elder encrypts data, it renames files with the victim's unique ID number, developer's email addr
Typically, users arrive at mylot[.]com and similar sites after clicking deceptive advertisements, visiting bogus web pages, or when potentially unwanted applications (PUAs) are installed on browsers and/or operating systems. In any case, users do not often visit these sites intentionally. Some ex
Ransomware-type programs are computer infections that cyber criminals use to prevent people from accessing their files and to blackmail them by making ransom demands. RobbinHood was discovered by Michael Gillespie and is an example of one of these programs. It encrypts data stored on the system,
Sharing many similarities with undertain.work, liveplayingnow.com, swindoors.work, jrg-news1.club and thousands of other sites on the web, mmk-news3[.]club is a rogue website. Visitors to this page are presented with dubious content and/or are redirected to other untrusted or possibly malicious si
Discovered by malware researcher, S!Ri, Aieou is a malicious program categorized as ransomware. Systems infected with this ransomware experience data encryption and ransom demands are made for decryption. During the encryption process, files are appended with the ".aieou" extension. For example,
Update_3239 is adware that is designed to serve advertisements, change certain browser settings (to promote a fake search engine), and collect sensitive information. In this way, Update_3239 functions as adware and a browser hijacker. Users do not generally download or install these apps intent
Discovered by xiaopao, Lalaland is a new variant of VoidCrypt ransomware. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, all affected files are renamed following this pattern: original fil
Discovered by xiaopao, Exploit is a ransomware-type program belonging to the VoidCrypt ransomware family. Exploit encrypts files, changes the filename of each encrypted file and creates the "!INFO.HTA" file, which is designed to create and display a ransom message. It creates this file in all fol