sweetcntry is a group of untrusted websites. At the time of research, loaded pages included a lottery scam and a deceptive website encouraging people to download and use a fake Adobe Flash Player installer. In fact, websites that are part of the sweetcntry group promote dubious software (such a
bestevervideoplayers[.]info is a deceptive/scam web page. Visitors to this site are informed that Flash Player might be outdated and are offered fake updates. Note that bogus software updaters are often used to proliferate untrusted content and programs such as adware, browser hijackers and othe
Max Uninstaller is a rogue program. It is advertised as a tool for efficient, effective and thorough program removal (uninstallation). In fact, it is classed as an unwanted application, due to its dubious proliferation methods - most users install Max Uninstaller unintentionally, or it infiltrates
Discovered by dnwls0719, Deal is malicious software belonging to the Phobos ransomware family. It is designed to encrypt data and keep it locked, until a ransom is paid for decryption. During the encryption process, all files are renamed with the victim's unique ID number, developer's email addres
Glupteba is a trojan-type program, malicious software that installs other programs of this type. Cyber criminals distribute Glupteba through malicious advertisements that can be injected into legitimate websites or advertising networks. Research shows that Glubteba can be used to distribute a bro
Discovered by Raby, BlueCheeser is malicious software categorized as ransomware. Devices infected with this program have their data encrypted and users receive ransom demands for decryption tools/software. When BlueCheeser encrypts, all affected files are appended with the ".himr" extension. For
"Activation Warning Alert" is a scam run by rogue web pages. It warns users of 'threats' present on their device, supposedly detected by Windows Security. Note that this scheme has no connection to Microsoft. The scam urges people to call a fake technical support number and share their Windows acc
worldofcontenting[.]info is a scam web page promoting a fake Adobe Flash Player updater. Visitors to this site are presented with deceptive information claiming that Flash Player software is out of date on the system. Note that bogus software updaters often infiltrate dubious content into device
Easy Email Login is a potentially unwanted application (PUA), a browser hijacker designed to provide quick access to email and social networking platforms, and various shopping and weather forecast websites. In fact, it promotes search.easyemaillogintab.net (a fake search engine) by changing brows
Discovered by S!Ri, PassLock damages files irreversibly by changing their content and renaming them by appending the ".encrypted" extension. For example, "1.jpg" becomes "1.jpg.encrypted", and so on. It also displays a pop-up window, which contains instructions about what victims should do next.