Tkoinprz belongs to the family of ransomware called Snatch. In most cases, malware of this type encrypts files, appends an extension to filenames, and provides instructions about how to contact the developers and pay the ransom. Tkoinprz renames encrypted files by appending the ".tkoinprz" extensi
allfreshposts[.]com is designed to promote bogus websites or load dubious content. There are many other websites of this kind including, for example, thewowfeed[.]com, hipermovies[.]icu, and gdanstum[.]net. Typically, users do not visit these web pages intentionally - they are opened through dece
CORE is a malicious program belonging to the Matrix ransomware family. It is designed to encrypt data and demand payment for decryption. During the encryption process, files are renamed following this pattern: "[BatHelp@protonmail.com].[random_string].CORE", which consists of the cyber criminals'
ANN is part of the Matrix ransomware family. It is designed to rename all encrypted files by changing filenames to the AskHelp@protonmail.com email address, a string of random characters and appending the ".ANN" extension. For example, it would rename a file called "1.jpg" to "[AskHelp@protonmail
FunSearchToday is rogue software classified as a browser hijacker. It operates by making alterations to browser settings to promote funsearchtoday.com (a fake search engine). Furthermore, most browser hijackers monitor users' browsing activity, and it is highly likely that this is the case with Fu
MegaAp is a browser hijacker which promotes toksearches.xyz (the address of a fake search engine) by modifying certain browser settings. Most browser hijackers also collect information relating to users' browsing activities. Typically, users download and install apps such as MegaAp unintentionall
Gold is the name of a malicious program belonging to the Dharma ransomware group. It is designed to encrypt data and demand payment for decryption. During the encryption process, all affected files are renamed following this pattern: original filename, unique ID assigned to the victims, cyber crim
ExploreParameter is an adware-type app with browser hijacker traits. Following successful installation, it runs intrusive advertisement campaigns (i.e. delivers ads), makes modifications to browser settings and promotes fake search engines. ExploreParameter promotes 0yrvtrh.com on Safari browser
Like most malicious programs of this type, Error ransomware is designed to encrypt files, rename them and provide victims with instructions about how to contact the developers. It belongs to the family of ransomware-type programs called Dharma. Error renames encrypted files by adding the victim's
Arena is a malicious program and part of the Dharma ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, all affected files are renamed following this pattern: original filenam