Grandoreiro is the name of malicious software, a banking Trojan written in the Delphi programming language. It targets users in Brazil, Mexico, Spain and Peru. Cyber criminals attempt to infect computers with software of this type to generate revenue by misusing information stolen by programs such
Discovered by Germán Fernández, CXK NMSL is a malicious program classified as ransomware. One method used to distribute this malware is via Corona virus-themed email spam campaigns. Additionally, the malicious executable of CXK NMSL (which initiates the infection) can be similarly disguised (e.g.
Polleryou (also known as Rentyr) was discovered by S!Ri. This ransomware encrypts victims' files, however, unlike most programs of this type it does not append any extension to filenames. Polleryou changes the desktop wallpaper and creates a ransom message within a text file named "Read-me22.txt".
mp3converter[.]to allows visitors to download YouTube videos converted to MP3 and MP4 formats, however, this page uses rogue advertising networks and redirects users of its video conversion service to other untrusted websites. Do not use the services of these websites. Furthermore, it is illegal t
Encrypted Search is a browser hijacker, advertised as a web searching tool with reinforced privacy measures. It is supposedly capable of encrypting search queries, traces of which it deletes after thirty minutes of inactivity. This hijacking application modifies browsers and promotes its fake sear
Similar to AnteFrigus, Prometey is malicious software classified as ransomware. It operates by encrypting data and demanding payment for decryption. During the encryption process, all affected files are appended with an extension, consisting of a random character string. For example, a filename s
SystemSpot is classified as adware and a Potentially Unwanted Application (PUA). Although it is promoted as providing fast searches, improved search results, etc., this app actually diminishes the browsing experience. SystemSpot adware delivers intrusive advertisements, which affect browsing and
Protect My Search Daily supposedly prevents users from visiting untrusted, harmful websites, however, this app is categorized as a potentially unwanted application (PUA), a browser hijacker. PUAs promote the addresses of fake search engines by changing browser settings and collecting browsing data
Identical to mob1ledev1ces.com, faters0upload[.]com is a scam website that promotes various rogue installers, which are usually disguised as Flash Player updates. These fake updaters are commonly used to infiltrate systems with untrustworthy software - adware, browser hijackers and other Potenti
Parallax is a remote administration tool (RAT), which can be purchased on a hacker forum. Remote administration tools are programs used by cyber criminals to take full control over the targeted computer. Generally, they use RATs to infect systems with malware, steal personal information and perfor