Ahegao is designed to encrypt victims' data, rename every encrypted file and display a pop-up window containing a ransom message. This ransomware renames encrypted files by appending the ".ahegao" extension to filenames. For example, it changes "1.jpg" to "1.jpg.ahegao", "2.jpg" to "2.jpg.ahegao",
Lucifer is a malicious program classified as a banking Trojan. It primarily targets banking information, however, this malware also makes attempts to exfiltrate data relating to email, e-commerce and streaming accounts. Its range of attacks has covered most of Latin America, and Europe, Asia and N
The ExperienceLine app supposedly improves the browsing experience. In fact, it promotes the Safe Finder website (by opening it through akamaihd.net) and feeds users with advertisements. Adware can often access and collect various user-system information. Note that apps such as ExperienceLine a
Rhino is a part of the Dcrtr ransomware family. Like other malware of this type, it encrypts files on infected systems and encourages victims to pay a ransom to recover them. Rhino renames encrypted files by adding the generalchin@countermail.com email address and appending the ".rhino" extension
Lesli is a malicious program belonging to the CryptoMix ransomware family. This malware operates by encrypting the data of infected systems and demanding payment for decryption tools/software. When Lesli ransomware encrypts, files are renamed according to this pattern: original filename, cyber cr
PanelStyle is a rogue app, categorized as adware. It delivers various intrusive advertisements, which seriously diminish browsing quality. Additionally, PanelStyle possesses browser hijacker traits, e.g. browser modifications and fake search engine promotion. This application promotes Safe Find
AppliedReview is an adware-type potentially unwanted application (PUA), which is designed to serve advertisements and promote Safe Finder by opening it through akamaihd.net. Commonly, apps such as AppliedReview gather browsing-related and other information. This app is categorized as a PUA, sinc
Discovered by Jakub Kroustek, Dec is a part of the Dharma ransomware family. This malicious program encrypts files, modifies their filenames and provides victims with instructions about how to contact the developers in a pop-up window and text file (these are ransom messages). Dec renames encrypt
Jquerysxur is a group of deceptive websites promoting various online schemes. Sites belonging to this group have been observed promoting variants of the "You've Made The 5-billionth Search" and "Latest version of Adobe Flash Player" scams. It is also possible that other schemes can be accessed t
NationalSpecial is an adware-type application. As well as running intrusive ad campaigns, it also possess certain characteristics common to browser hijackers, such as browser modification and fake search engine promotion. This app promotes Safe Finder through akamaihd.net. Furthermore, most adw