ExpertRAT is malware which functions as a Remote Administration/Access Trojan (RAT). It allows cyber criminals to control infected machines (computers) remotely. Research shows that cyber criminals behind ExpertRAT target users living in Italy. This RAT was discovered by reecDeep. If there is any
Jdokao is a malicious program, which is part of the Snatch ransomware family. It operates by encrypting the data stored on infected systems and making ransom demands for decryption. During the encryption process, files are appended with the ".jdokao" extension. For example, a file originally name
Myflixer[.]to is an untrusted website offering an illegal movie-streaming and download service. It also uses rogue advertising networks, containing ads designed to promote various dubious websites. Therefore, myflixer[.]to should never be trusted or used. At the time of research, myflixer[
vpnbestapp[.]com is a deceptive website running scams primarily targeting iPhone users. There are two scam variants promoted on this site. One version claims that the user's mobile device has been infected and requires legitimate virus protection tools to be installed onto it. The other version
Smaug ransomware is available for download on the dark web: it is for sale as Ransomware as a Service (RaaS). Therefore, cyber criminals who purchase it can perform ransomware attacks without having to develop malware of this type. Smaug is designed to encrypt files, rename them and create a ranso
TopMusicSearches is dubious software categorized as a browser hijacker. It operates by making alterations to browser settings to promote topmusicsearches.com (a fake search engine). Additionally, most browser hijackers have data tracking capabilities, which are used to monitor browsing activity.
ProgressHelper is an adware-type application with browser hijacker traits. It operates by running intrusive advertisement campaigns, making modifications to browser settings and promoting fake search engines. ProgressHelper promotes 0yrvtrh.com on Safari browsers and search.adjustablesample.com
GamerSearch promotes gamer-search.com (a fake search engine) by changing certain browser settings. Commonly, apps of this type also collect browsing-related information. Generally, users download and install browser hijackers inadvertently and, for this reason, they are categorized as potentially
ThunderX is a malicious program categorized as ransomware. It is designed to encrypt data and demand payment for decryption. During the encryption process, all affected files are appended with the ".tx_locked" extension. For example, a file originally named something like "1.jpg" would appear as "
Zphs part of the Dharma ransomware family. It encrypts files, modifies their filenames, displays a ransom message in a pop-up window, and creates the text file named "FILES ENCRYPTED.txt" (another ransom message). Zphs renames encrypted files by adding the victim's ID, zphc@cock.li email address,