Based on other ransomware named Hakbit, SERVO99 (also known as BSJB) was discovered by James. SERVO99 encrypts files, changes the desktop wallpaper and drops a ransom message in all folders that contain encrypted data. It renames encrypted files by appending the ".crypted" extension to filenames.
Discovered by malware researcher, Raby, 8800 is a malicious program belonging to the Dharma ransomware family. This malware is designed to encrypt the data of infected systems and demand payment for decryption. During the encryption process, all affected files are renamed according to the followi
cc[.]vc offers URL (web address) shortening services, however, it also employs rogue advertising networks. Visitors to this site are presented with various dubious and harmful ads and/or are redirected to other untrusted and possibly malicious web pages. Therefore, you are strongly advised against
SearchWebSvc is one of the potentially unwanted applications (PUAs) that are part of the AdLoad adware family. These apps are designed to feed users with various intrusive advertisements and promote the address of a fake search engine. SearchWebSvc promotes akamaihd.net, an address that redire
Discovered by Jakub Kroustek, PLEX is malicious software belonging to the Crysis/Dharma ransomware family. Systems infected with this malware have their data encrypted and demand ransom payments for decryption. During the encryption process, all compromised files are renamed according to the foll
There are many websites that are designed to deceive visitors into using a fake Adobe Flash Player installer, which supposedly updates the currently installed version. These fake installers are designed to install browser hijackers, adware and other potentially unwanted applications (PUAs). In so
Barak is a malicious program belonging to the Phobos ransomware family. It operates by encrypting data and demanding payment for decryption tools/software. During the encryption process, files are renamed with the following pattern: original filename, unique ID, cyber criminals' email address and
"Secret Love" is a spam email campaign that cyber criminals employ to trick recipients into extracting an attached ZIP archive file and executing the resultant JavaScript (.js) file. If executed, this file installs NEMTY 2.5 REVENGE ransomware. We strongly advise that you ignore this email and, mo
Prizesfinder is a group of deceptive websites, which promote various scams. They have been recorded promoting "Latest version of Adobe Flash Player" and "Dear Chrome User, Congratulations!" schemes. Trusting these scams can lead to serious issues. Few users enter Prizesfinder and other, similar
CryptoDarkRubix is the name of ransomware that was discovered by dnwls0719. Most programs of this type are designed to encrypt files, create and display ransom messages, and rename encrypted files. Rather than encrypting files, however, CryptoDarkRubix rewrites their contents (and renders them unu