Cyber criminals behind malspam campaigns attempt to trick recipients into executing a file designed to install malicious software. They attach the file to an email or send a website link designed to download it (or open a download page for the file). Typically, these emails are disguised as offici
"POLÍCIA SEGURANÇA PÚBLICA" is a scam email targeting Portuguese-speaking users. These deceptive messages are presented as notifications of a lodged virtual complaint sent by the "Electronic Police Station". Note that all information presented in these emails is false. The "POLÍCIA SEGURANÇA PÚBL
Appnewtab is a browser hijacker, which promotes barosearch.com, the address of a fake search engine by modifying certain browser settings. It is also capable of collecting information relating to users' browsing activities (browsing data). Users often download and install browser hijackers uninte
AdjustableView is an adware-type application with browser hijacker traits. It operates by delivering intrusive advertisement campaigns, making modifications to browser settings to promote fake search engines. AdjustableView promotes 0yrvtrh.com on Safari browsers and search.adjustablesample.com
Discovered by GrujaRS, Suncrypt ransomware prevents victims from accessing files by encryption. It also renames all encrypted files and creates a ransom message. It renames encrypted files by appending a string of random characters as the new extension. For example, Suncrypt would rename a file c
FieldIndexer is classified as adware, since it feeds users with various advertisements. Commonly, apps of this type collect information relating to users' browsing habits, and this might also be the case with FieldIndexer. Additionally, it could be designed to promote a fake search engine (funct
StreamSaloon is a browser hijacker designed to change certain browser settings to the address a fake search engine (streamsaloon.com). Additionally, it might collect information relating to users' browsing activities. Generally, users download and install apps such as StreamSaloon (browser hijack
PublicBoardSearch is rogue software classified as adware. This app also has browser hijacker traits. PublicBoardSearch operates by delivering intrusive advertisement campaigns and making modifications to browsers to promote fake search engines. Additionally, most adware-type apps and browser hi
NW24 belongs to the Dharma ransomware family and was discovered by Jakub Kroustek. This ransomware encrypts files, renames them and provides victims with instructions about how to contact the developers. NW24 renames files by adding the victim's ID, newhelper24@protonmail.ch email address and appe
SearchConverters is a browser hijacker, which operates by making changes to browser settings to promote a fake search engine (search-converters.com). This software also monitors users' browsing habits. Additionally, due to the dubious techniques used to proliferate SearchConverters, it is classifi