Microsoft Lync (and Office Communicator) is a former name of Skype for Business, a popular instant messaging application. Research shows that there are a number of fake, deceptive Microsoft Lync installers designed to distribute unwanted, malicious applications. This is not the first time cyber c
MassLogger (also known as Mass Logger) is a malicious program classified as a keylogger and 'stealer malware'. The primary purpose of MassLogger is data extraction (i.e., it steals information). The data targeted by this malware depends on the cyber criminals using it. Since this keylogger/steale
Cyber criminals often attempt to trick users into installing malware on their computers through spam campaigns. They send emails that contain malicious attachments or website links designed to download malicious files. Their main goal is to deceive recipients into opening the rogue file, which the
thediseasetracker[.]com is a rogue web page similar to zpredir1.com, biz-4u.com, behavingsoping.club and thousands of others. It provides visitors with dubious content and/or redirects them to other untrusted or even malicious sites. Typically, thediseasetracker[.]com and similar websites are acc
Precious Bible is a browser hijacker endorsed as a tool capable of providing daily bible verses and easy access to related content. In fact, this rogue software modifies browsers to promote preciousbible.com (a fake search engine). Additionally, Precious Bible has data-tracking capabilities, which
Discovered by GrujaRS, Qensvlcbymk is a malicious program belonging to the Snatch ransomware family. Qensvlcbymk ransomware operates by encrypting data and demanding payment for decryption. During the encryption process, all compromised files are appended with the ".qensvlcbymk" extension. For ex
As its name suggests, PC Win Booster is software designed to improve computer performance. In fact, this app is distributed by including it into the set-ups of other programs. Programs distributed in this way are categorized as potentially unwanted applications (PUAs). These rogue apps have a dubi
zpredir1[.]com is a rogue website sharing many similarities with biz-4u.com, thenickelpress.com, behavingsoping.club and countless others. These sites operate by presenting visitors with dubious content and/or redirecting them to other untrusted or even malicious web pages. Few visitors access zp
Eking belongs to the Phobos ransomware family. It encrypts files, renames them, and generates a number of ransom messages. Eking renames files by adding the victim's ID, decphob@tuta.io email address, and appending the ".eking" extension to filenames. For example, it renames "1.jpg" to "1.jpg.id[
Weather Online Now is advertised as an app providing the latest forecast updates. In fact, this is a browser hijacker that promotes a fake search engine (weatheronlinenow.com) by changing browser settings. Additionally, it might collect information relating to users' browsing activity. Typically,