Discovered by Michael Gillespie, Shootlock is a malicious program and a new Makop ransomware variant. This malware encrypts data of the infected system to demand ransom payments for decryption tools/software. When Shootlock ransomware encrypts data, all affected files are renamed according to the
BazarBackdoor was developed by the cyber criminals who developed TrickBot. They use this 'backdoor' malware as a tool to compromise infected networks. They might also use it to attack regular users. In most cases, threat actors use software such as BazarBackdoor to steal sensitive, financial data,
Like most browser hijackers, Translations Instant assigns certain browser settings to the address of a fake search engine (to promote it). In this case, it sets them to translationsinstanthtab.com. Commonly, apps of this type record various user-system information (typically, browsing-related deta
Easy News Now is advertised as an app which provides quick access to various news-related web pages, however, this is a potentially unwanted application (PUA) classified as adware. Easy News Now serves advertisements and might collect browsing-related (and other) information. Adware-type apps are
Search Sherpa is a browser hijacker. This piece of software modifies browser settings to promote search-sherpas.com, a fake search engine. Furthermore, it possesses data tracking capabilities employed to monitor users' browsing activity. Due to its dubious proliferation methods, Search Sherpa is a
Zorgo is a malicious ransomware-type program based on HiddenTear. It is designed to encrypt the data of infected systems in order to demand payment for decryption. During the encryption process, all affected files are appended with the ".zorgo" extension. For example, a file originally named some
InteractivePremium is a rogue application classified as adware. It runs intrusive advertisement campaigns. Additionally, it has browser hijacker characteristics. InteractivePremium modifies browsers to promote bogus search engines. This app promotes Safe Finder via akamaihd.net. Most adware typ
GalaxySpin is rogue software categorized as a browser hijacker. It operates by making alterations to browser settings to promote galaxyspin.com (a fake search engine). Additionally, as is common to browser hijackers, GalaxySpin can track browsing-related data. Since most users install GalaxySpin i
Part of the Dharma ransomware family, TRAMP prevents victims from accessing their files by encryption, changes filenames, creates ransom messages and displays another message in a pop-up window. TRAMP renames encrypted files by adding the victim's ID and clevercrypt@aol.com email address, and appe
ServiceBuilder supposedly improves the browsing experience and is useful in various other ways, however, this app serves advertisements, gathers information (including private, sensitive details) and promotes Safe Finder (by opening it via akamaihd.net). In most cases, people download and insta