Eur is a malicious program belonging to the Dharma ransomware family. It is designed to encrypt data and demand ransoms for decryption. During the encryption process, all affected files are renamed following this pattern: original filename, unique ID assigned to the victims, cyber criminals' email
SignalBalance serves advertisements, collects sensitive information and changes certain browser settings to z6airr.com or adjustablesample.com. This app essentially functions as adware and a browser hijacker. Typically, users do not download or install SignalBalance or similar apps intentionally
NewVideoSearch is rogue software classified as a browser hijacker. Following successful installation, it makes changes to browser settings to promote newvideo-search.com (a bogus search engine). This browser hijacker also monitors users' browsing activity and gathers vulnerable data extracted from
B888 belongs to the family of ransomware called Matrix. This ransomware encrypts files, modifies their filenames and creates the "!B888_INFO!.rtf" file (ransom message) in all folders that contain encrypted data. B888 renames files by replacing their filenames with the billwong73@yahoo.com email a
Cposysrzk is a malicious program belonging to the Snatch ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption. During the encryption process, all affected files are appended with the ".cposysrzk" extension. For example, a
HDMusicSearches is a browser hijacker designed to promote hdmusicsearches.com, a fake search engine. Generally, these apps achieve this by changing certain browser settings. Most also collect details relating to users' browsing habits (browsing data). HDMusicSearches and other similar apps are ca
AppLovin is an adware-type application disguised as TikTok, a legitimate video-sharing social networking application. Research shows that cyber criminals behind this fake app target Jio users in India who use Android smartphones. Note that the TikTok app is banned in this country. After installati
gsecurecontent[.]com is a rogue website designed to redirect visitors to other untrusted/malicious web pages and/or present them with dubious content. This site is typically promoted by adware-type Potentially Unwanted Applications (PUAs) already infiltrated into the system. As well as redirect
TheConverterSearch is a browser hijacker. Following successful infiltration, it operates by making changes to browser settings to promote theconvertersearch.com (a fake search engine). This browser hijacker also monitors users' browsing activity and collects sensitive information extracted from it
Cndqmi is a part of the Snatch ransomware family. Typically, malware of this type encrypts victim's files, renames them and creates and/or displays a ransom message. Cndqmi renames encrypted files by appending the ".cndqmi" extension. For example, it would change "1.jpg" to "1.jpg.cndqmi", "2.jpg"