Zasifrovano Zaplat is malware belonging to the Xorist ransomware family. It encrypts and renames victims' files, changes the desktop wallpaper, displays a ransom message in a pop-up window and creates another (within the "HOW TO DECRYPT FILES.txt" text file) in all folders that contain encrypted d
beforeigntools[.]club is an untrusted website sharing many similarities with readnewmessage.com, uptoabc.com, wapwon-k.uno, and countless others. This site presents users with dubious material and/or redirects to other rogue/malicious web pages. Typically, beforeigntools[.]club and similar websit
LuxNET is a Remote Administration/Access Trojan (RAT), a piece of malware that cyber criminals use to control infected computers remotely. Generally, they use RATs to steal sensitive, confidential information and infect computers with other malicious software. RATs are often difficult to detect,
ConverterSearchNow is a browser hijacker designed to make modifications to browser settings to promote convertersearchnow.com (a bogus search engine). Furthermore, ConverterSearchNow has data tracking capabilities, which are employed to monitor browsing activity and gather sensitive information ex
ConverterSearchHD is a browser hijacker which changes certain browser settings to convertersearchhd.com to promote a fake search engine. Like most apps of this type, it collects information relating to users' browsing activity. Generally, users download and install browser hijackers such as Conve
Generally, malspam campaigns are used to trick recipients into opening a malicious attachment or a file downloaded via a malicious website. The file then infects computers with malware. In this particular case, cyber criminals send emails with an attached ".7z" archive file, which contains a malic
readnewmessage[.]com is a rogue website. There are thousands of similar sites online, including, for example, wapwon-k.uno, allwownewz.com, and urgent-incoming.email. Visitors to readnewmessage[.]com are presented with dubious content and/or are redirected to other untrusted or possibly malicious
This ransomware is named 'Microsoft', however, the actual Microsoft company has nothing to do with this piece of malware, which belongs to the Xorist ransomware family. Like most malware of this type, 'Microsoft' renames files and creates a ransom message. It renames files by appending the ".Micr
DogeCrypt is a new variant of DesuCrypt ransomware. This malware operates by encrypting files and renaming them for the purpose of demanding payment for decryption. During the encryption process, all affected files are renamed following this pattern: original filename, cyber criminals' email addre
NEWRAR is a malicious program belonging to the Matrix ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption tools. This ransomware operates by encrypting files and renaming them following this pattern: "[newrar@tuta.io].[r