Lampar is a part of the Scarab ransomware family. This ransomware renames encrypted files by replacing filenames with a string of random characters and appending the ".lampar" extension. For example, it would rename a file called "1.jpg" to "5D+8K+2UDZjTWGGI.lampar", "2.jpg" to "3F+7L+4BCZkMVCMZ.l
Now News Online is a typical browser hijacker which promotes the address of a fake search engine (hnownewsonline.com) by changing certain browser settings. Apps of this type often gather information relating to browsing activity. Note that users often download and install apps such as Now News On
DLLEscort is advertised as tool which fixes .dll, .exe, .sys, .ocx, and other errors, DirectX problems, maintain and keeps computers clean and fast, and prevents applications and systems from crashing. In fact, this program is distributed through installers of other programs and included into thei
Typically, malspam contains infected (malicious) attachments or website links. Cyber criminals behind these malicious spam campaigns attempt to deceive recipients into believing that an email is legitimate and executing a malicious file designed to install malware. This particular malspam campaig
MyNewsFree is rogue software classified as a browser hijacker. Following successful installation, it makes alterations to browser settings to promote search.mynewsfree.com (a bogus search engine). Most browser hijackers have data tracking capabilities, which are employed to monitor users' browsing
Easy Print Recipes is a rogue application endorsed as a tool for easy access to popular recipe websites. It also creates a widget providing printable recipes. In fact, following successful infiltration, Easy Print Recipes makes modifications to browser settings to promote heasyprintrecipes.com (a
MusicStreamSearch is a potentially unwanted application (PUA), a browser hijacker which changes certain browser settings to the address of a fake search engine - in this case, feed.musicstreamsearch.com or portal.musicstreamsearch.com. These apps often gather details relating to users' browsing h
The SearchConvertor browser hijacker changes certain browser settings to feed.searchconvertor.com or portal.searchconvertor.com (addresses of fake search engines). Commonly, apps of this type collect browsing-related, and other, information. Generally, users download and install browser hijackers
Discovered by Ravi, Txt (JobCrypter) is malware and a ransomware-type program. Following successful infiltration, Txt (JobCrypter) encrypts data in order to demand payment for decryption. During the encryption process, files are appended with the ".txt" extension. For example, a file originally n
iTunes (FlyStudio) ransomware was discovered by GrujaRS. Typically, malware of this type encrypts files, modifies the filenames and generates a ransom message. iTunes (FlyStudio) renames encrypted files by appending the ".itunes" extension to filenames. For example, it would change a file named "