24-support-global[.]expert is a deceptive web page that promotes various scams. At the time of research, this site was observed promoting several versions of the "Your Apple iPhone is severely damaged" scam and one stating that users need to download a VPN application to continue watching conten
Like many other websites of this kind, mobile-detection[.]com promotes a potentially unwanted application (PUA) by claiming that use of the app will remove viruses, which have supposedly been detected by the site. In summary, websites such as mobile-detection[.]com promote software in deceptive
Belonging to the Djvu ransomware family, Epor is designed to encrypt files, modify their filenames, and create a ransom message. Epor renames files by appending the ".epor" extension to filenames. For example, "1.jpg" is renamed to "1.jpg.epor", "2.jpg" to "2.jpg.epor", and so on. It also creates
"Mac OS Alert" is a scam promoted on various deceptive websites. This scheme claims that visitors' devices may be infected and recommends a quick scan. The fake scan then details several nonexistent viruses and states that the anti-virus suite must be updated. No web page can detect threats/issu
CRAT is a Remote Access Trojan (RAT), a form of malware that allows cyber criminals to control infected devices remotely. Research shows that this RAT (depending on its version) can be used to access and control computers and to download and install additional malicious components allowing it to
IStreamingSearch is rogue software classified as a browser hijacker. Following successful installation, it makes alterations to browser settings to promote istreamingsearch.com (a fake search engine). Additionally, IStreamingSearch has data tracking capabilities, which are used to monitor users' b
There are many websites similar to oc-protection[.]com on the internet. Generally, they display fake virus notifications to trick users into installing potentially unwanted applications (PUAs), which remove viruses supposedly detected on devices by the web pages. Note that users do not often vi
Gcahvv is malicious software belonging to the Snatch ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all affected files are appended with the ".gcahvv" extension. For example, a file o
TrustedUpdater is classified as adware because it serves advertisements. It also functions as a browser hijacker and changes certain browser settings to the address of a fake search engine. It is very likely that TrustedUpdater will also collect details relating to users' browsing activities and
DeviceHelper is a rogue application categorized as adware. Additionally, this app has browser hijacker traits. It runs intrusive ad campaigns and makes alterations to browser settings to promote fake search engines. DeviceHelper promotes d2sri.com on Safari browsers and search.basicgeneration.co