Discovered by dnwls0719, Zeronine is malicious software categorized as ransomware. This malware operates by encrypting data in order to demand payment for decryption. During the encryption process, all affected files are appended with the ".zeronine" extension. For example, a file originally name
"To continue, you must perform a manual update" is a scam run on deceptive websites. It claims that users' browsers lack unspecified updates and have become vulnerable. This scheme proliferates through Potentially Unwanted Applications (PUAs) such as adware. Few visitors to scam sites access them
OptimalPromo is an adware-type app, which also has browser hijacker characteristics. OptimalPromo operates by delivering intrusive ad campaigns, changing browser settings, and promoting a fake search engine: Safe Finder (via akamaihd.net). Since most users download and install OptimalPromo unint
AccessSide functions as adware (serves intrusive advertisements) and is also designed to promote the Safe Finder website through another dubious web address (akamaihd.net). Adware-type apps also track and record information. They are categorized as potentially unwanted applications (PUAs), since
GlUTe is malicious software, which is part of the Xorist ransomware family. It is designed to encrypt the data of infected systems in order to demand ransom payments for decryption tools. During the encryption process, all affected files are appended with the ".GlUTe" extension. For example, a fi
Plenty O' Apps assigns certain browser settings to hplentyoapps.com in order to promote this fake search engine. Browser hijackers often gather data relating to users' browsing activity, and this might also be the case with Plenty O' Apps. Since users do not often download or install browser hija
"Chorus Union" is the name of a malicious spam campaign designed to distribute Dridex banking malware. The scam emails sent through this spam campaign are disguised as impending invoices from "Chorus Union". These messages are intended to trick recipients into clicking the link presented within th
As its name suggests, Smart Searching Tab is an app designed to improve the browsing experience, however, it is actually designed to promote hsmartsearching.net (the address of a fake search engine) and collect browsing data. I.e., Smart Searching Tab is a browser hijacker designed to promote a fa
StockCommon is an adware-type application, which serves various advertisements via the user interface. Additionally, it is designed to promote the Safe Finder website through another dubious web address (akamaihd.net). Commonly, apps of this type not only serve ads but also collect information r
HimeraLoader is a malicious program used by cyber criminals who seek to infect computers with other programs of this kind (e.g., ransomware, remote access Trojans). Research shows that it was available for purchase on hacker forums at a cost of 700 rubles. Typically, cyber criminals attempt to in