Driver Maps is a rogue app, endorsed as a tool for quick access to various maps and driving routes. It operates by modifying browsers to promote search.hdrivermaps.com, a fake search engine. Therefore, this app is categorized as a browser hijacker. Software within this category commonly has data
"UNICEF" is a deceptive email (subject: "UNICEF COVID-19 TIPS APP") designed to spread the Netwire Remote Access Trojan (RAT). This scam message abuses the current social climate (at time of writing, the coranavirus pandemic) to trick recipients into opening its malicious attachment. The attached
MoreResults is an adware-type application which serves various advertisements. People commonly download and install adware inadvertently. Therefore, these programs are also known as potentially unwanted applications (PUAs). Adware-type apps often serve ads and gather information. Adware-type
CrypSearch is a browser hijacker, which is promoted as a tool supposedly capable of improving web searches. It operates by modifying browsers, restricting/denying access to settings to promote crypsearch.com, a fake search engine. Furthermore, it has data tracking capabilities, which are employed
The AddUpgrade program is classified as adware and potentially unwanted application (PUA). After installation, adware-type applications feed users with advertisements and collect user-system information. Applications such as AddUpgrade are classified as PUAs, since people often download and inst
macLauncher belongs to a family of adware infections called AdLoad. Adware feeds users with various online advertisements, however, macLauncher promotes a fake search engine and might also operate as an information tracking tool. Typically, users download and install adware inadvertently, and t
Remk is a malicious program belonging to the STOP/Djvu ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. When this ransomware encrypts, all affected files are appended with the ".remk" extension. For example, a file o
"Trueprofit" is a group of deceptive web pages that run various scams. Sites belonging to the group have been observed promoting "Latest version of Adobe Flash Player" schemes. These scams operate by stating that Flash Player is outdated and offering fake updates. Note that bogus software updat
Discovered by S!Ri. Hentai Onichan belongs to the Quimera ransomware family. Hentai Onichan is designed to rename all encrypted files by appending the ".hor" extension. For example, it renames a file named "1.jpg" to "1.jpg.hor", and so on. Like most programs of this type, it provides victims with
Pysa is a new variant of Mespinoza ransomware, which encrypts files and appends the ".pysa" extension to filenames. For example, "1.jpg" becomes "1.jpg.pysa", and so on. It also creates a text file named "Readme.README.txt" containing a ransom message with instructions about how to recover files.