paluns[.]xyz is a deceptive website designed to promote various scams. At the time of research, this site ran desktop and mobile version scams. One of the schemes warned users of viruses (actually nonexistent) on their devices, which is something no web page can detect. Others claimed that a V
EssentialCommand is an adware-type application that also has browser hijacker traits. Following successful infiltration, it delivers intrusive advertisement campaigns, makes modifications to browser settings and promotes fake search engines. Most adware and browser hijackers gather browsing-rel
WizApp belongs to the Pirrit adware family. Adware is a type of software that serves advertisements. Typically, displayed ads conceal underlying content of visited websites and can be very annoying. Adware-type apps are often designed to gather various user information. WizApp installs another
PromoteMethod is dubious software categorized as adware and also possessing browser hijacker traits. It operates by running intrusive advertisement campaigns, making modifications to browser settings and promoting fake search engines. PromoteMethod promotes Safe Finder through akamaihd.net in th
Discovered by Jakub Kroustek, Felix is a malicious program belonging to the Dharma ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption. During the encryption process, all affected files are renamed according to this patte
As the title of this article suggests, Null belongs to a family of ransomware called Dharma. This particular ransomware was discovered by Jakub Kroustek. It is designed to change the name of every encrypted file by adding the victim's ID, nullcipher@cock.li email address and appending the ".null"
PhaseSearch is one of many applications that display various advertisements and collect details relating to browsing activities. Software of this type is called adware. People do not generally download or install adware intentionally - they are tricked into it. For this reason, PhaseSearch is kn
The Quick Mac Fixer application is supposedly capable of improving operating system performance. According to this software's promotional material, it can manage installed apps and remove unwanted files (e.g. unused, large, duplicate and junk files). Due to the dubious methods used to proliferat
GNS encrypts files, changes their filenames and provides victims with instructions about how to contact the developers. This ransomware renames files by adding the victim's ID, geniusid@protonmail.ch email address and appending the ".GNS" extension. For example, it would rename "1.jpg" to "1.jpg.
"System Activation KEY has expired" is a message displayed in a fake technical support scam, promoted by various deceptive websites. Visually this scheme mimics the appearance of the Blue Screen error displayed on Windows Operating Systems (OSs), specifically the graphics of these errors as they a