Discovered by Marcelo Rivero, bH4T is a ransomware-type program that belongs to the Dharma ransomware family. Note that bH4T ransomware encrypts files, modifies their filenames, displays a pop-up window (ransom message) and creates the "FILES ENCRYPTED.txt" text file (another ransom message). It
Like most adware-type applications, ExpandedQuest is designed to serve advertisements. It also functions as a browser hijacker, changing certain browser settings to the address of a fake search engine. Additionally, it might collect data. In most cases, users download and install apps such as E
Sharing many similarities with content4you.net, mylot.com, redneckrepairs.com and thousands of others, reightpainf[.]top is a rogue web page. Visitors to this site are presented with dubious content and/or are redirected to other untrusted or possibly malicious pages. Few users access reightpainf
ProgressElemnt is adware which serves various advertisements and also operates as as a browser hijacker, promoting the address of a fake search by modifying certain browser settings. Additionally, this app might be designed to collect various data. Note that users often download and install adw
Fast! supposedly allows computers to run faster by speeding up applications, improving CPU execution and lowering data transmission latency, however, developers use dubious methods for distribution and thus users often install Fast! onto their computers inadvertently. Therefore, Fast! is categoriz
AnalyzerSearch is an adware-type application with browser hijacker characteristics. Following successful infiltration, this app runs intrusive advertisement campaigns and makes alterations to browser settings to promote fake search engines. Due to the dubious techniques used to proliferate Analy
AssistiveValue serves advertisements and promotes addresses of a fake search engines by changing certain browser settings. It is also possible that this adware is capable of collecting information relating to users' browsing habits and other data. In this way, AssistiveValue functions as adware
content4you[.]net is one of thousands of similar rogue websites. Other examples are mylot.com, oceanbefo.top, redneckrepairs.com, and newscatch24.com. Visitors to this web page are presented with dubious content and/or are redirected to other untrusted or possibly malicious websites. Typically, u
Discovered by GrujaRS, XNMMP is another variant of CONTI ransomware. Note that XNMMP itself also has at least two versions. One renames encrypted files by appending the ".XNMMP" extension to their filenames, whilst another appends the ".TJODT" extension. For example, "1.jpg" is renamed to "1.jpg.
Discovered by malware researcher S!Ri, LolKek is a new variant of the BitRansomware ransomware-type malicious program. It is designed to encrypt the data of compromised systems in order to make ransom demands for decryption tools/software. During the encryption process, files are appended with the