Discovered by xiaopao, Phantom, also known as PhantomChina, is a malicious program classified as ransomware. This malware operates by encrypting data and demanding payment for decryption. During the encryption process, all affected files are appended with the ".phantom" extension. For example, a
Ecogreen APP is a browser hijacker, which promotes tailsearch.com, the address of a fake search engine. Generally, browser hijackers promote specific addresses by modifying browser settings. Additionally, Ecogreen APP collects search queries that users enter whilst browsing the web. Commonly, app
Eight is a malicious program, which is part of the Phobos ransomware family. It encrypts files and makes ransom demands for the decryption. Eight renames files by adding the victim's ID and cyber criminals' email address (updated variants of this ransomware add different ones) and appending them
PracticalRemote is a rogue application classified as adware and also possessing browser hijacker traits. It operates by running intrusive advertisement campaigns and making modifications to browser settings in order to promote fake search engines. PracticalRemote promotes 0yrvtrh.com in this man
Streaming Lab Tab is classified as a browser hijacker, since it changes certain browser settings to streaming-lab.com (the address of a fake search engine). It is also likely to gather browsing-related information. Note that users often download and install browser hijackers unintentionally and,
TiNx belongs to the Xorist ransomware family. Like other malware of this type, TiNx encrypts data, changes the filename of each encrypted file and generates a ransom message. It also appends the ".TiNx" extension to filenames. For example, it would rename a file called "1.jpg" to "1.jpg.TiNx", "2.
Discovered by Michael Gillespie, ZaCaPa is a malicious program that is part of the Xorist ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all compromised files are appended with the ".Z
Lampar is a part of the Scarab ransomware family. This ransomware renames encrypted files by replacing filenames with a string of random characters and appending the ".lampar" extension. For example, it would rename a file called "1.jpg" to "5D+8K+2UDZjTWGGI.lampar", "2.jpg" to "3F+7L+4BCZkMVCMZ.l
Now News Online is a typical browser hijacker which promotes the address of a fake search engine (hnownewsonline.com) by changing certain browser settings. Apps of this type often gather information relating to browsing activity. Note that users often download and install apps such as Now News On
DLLEscort is advertised as tool which fixes .dll, .exe, .sys, .ocx, and other errors, DirectX problems, maintain and keeps computers clean and fast, and prevents applications and systems from crashing. In fact, this program is distributed through installers of other programs and included into thei