Local Weather Alerts is advertised as an app that allows people to check weather forecasts. In fact, it promotes hlocalweatheralerts.co (the address of a fake search engine) by changing browser settings and gathers browsing-related data. Local Weather Alerts is a browser hijacker, a potentially un
SearchVirtualInfo is an adware-type application that enables placement of intrusive ads on any visited website. Additionally, this app modifies browsers to promote fake search engines - behavior common to software classified as browser hijackers. Most adware programs and browser hijackers have d
greacore[.]com is a scam website, which makes deceptive claims to promote dubious applications. It states that users' iPhones have been damaged by two viruses and, to remove them, they must download and install a recommended app. These schemes are commonly used to distribute fake anti-virus too
"(3) Viruses has been detected" is a scam run on various deceptive web pages. It claims that threats have been detected on the device and recommends an untrusted piece of software to remove the fake viruses. This scheme targets iPhone users; however, it might also be accessed through other Apple
PoetRAT is the name of a Remote Access Trojan (RAT). This type of malware allows cyber criminals to monitor and control the victim's computer. In most cases, RATs such as PoetRAT are distributed to infect computers with other malware and/or steal sensitive information. This particular malware can
Thana is malicious software categorized as ransomware. This malware operates by encrypting data in order to demand ransoms for decryption. During the encryption process, files are appended with the ".thana" extension. For example, a file originally named something like "1.jpg" would appear as "1.
The internet is full of deceptive websites designed to trick people into downloading and installing various potentially unwanted applications (PUAs). This particular page encourages visitors to continue watching a video in Safe Mode and install/update AdBlocker. Research shows that this dubious
Discovered by S!Ri, ComputerDestroyer is a form of malware that locks the infected computer. In this way, it prevents victims from accessing and using their data. It also changes the desktop wallpaper, displays a pop-up window asking users to enter a 'decryption code', and plays an audio message r
Access+ is classified as adware. It delivers various unwanted and even harmful advertisements into search results provided by the Google search engine. Additionally, most adware-type apps have data tracking capabilities, which are employed to monitor users' browsing activity. Access+ is no except
As with Jerry_glanville and DavesSmith, KEY0004 is yet another variant of Balaclava ransomware, which was discovered by GrujaRS. It encrypts files, renames them and creates ransom messages. KEY0004 renames files by appending the ".KEY0004" extension to filenames. For example, it renames "1.jpg" t