People do not often visit websites such as bestapps2020[.]com intentionally - browsers with potentially unwanted applications (PUAs) installed open these pages automatically. Other examples of similar web pages promoted by PUAs are mmk-news3[.]club, undertain[.]work and liveplayingnow[.]com. Note
Discovered by xiaopao, Peace is malware and part of the VoidCrypt ransomware family. It encrypts files, modifies their filenames and displays a ransom message. Peace ransomware renames files by adding the peace491@tuta.io email address, victim's ID and appending the ".Peace" extension to filenames
searchnets.xyz is the address of a bogus search engine. These fake search engines are usually promoted by rogue software called browser hijackers, which make modifications to browser settings. Browser hijackers have data tracking capabilities, which are employed to monitor users' browsing activi
The purpose of PublicCharacterSearch is to generate revenue for the developers by serving ads, promoting a fake search engine and gathering various data. This app functions both as adware and a browser hijacker. People often download these apps unintentionally and, therefore, they are categorize
GravityRAT is malware classified as spyware: it allows cyber criminals to steal certain data from infected devices. The cyber criminals behind this malware target Windows, macOS and Android users. If there is reason to believe that GravityRAT is installed on your computer or mobile telephone, remo
"This computer is blocked" is a tech support scam, a fake virus alert that occurs only when visiting an untrustworthy/deceptive website. Typically, users do not visit websites of this type intentionally - potentially unwanted applications (PUAs) redirect them to it. As well as redirects to decept
Elder is malicious software belonging to the Phobos ransomware family. It is designed to encrypt data and keep it inaccessible until a ransom is paid (i.e., decryption software/tool is purchased). When Elder encrypts data, it renames files with the victim's unique ID number, developer's email addr
Typically, users arrive at mylot[.]com and similar sites after clicking deceptive advertisements, visiting bogus web pages, or when potentially unwanted applications (PUAs) are installed on browsers and/or operating systems. In any case, users do not often visit these sites intentionally. Some ex
Ransomware-type programs are computer infections that cyber criminals use to prevent people from accessing their files and to blackmail them by making ransom demands. RobbinHood was discovered by Michael Gillespie and is an example of one of these programs. It encrypts data stored on the system,
Sharing many similarities with undertain.work, liveplayingnow.com, swindoors.work, jrg-news1.club and thousands of other sites on the web, mmk-news3[.]club is a rogue website. Visitors to this page are presented with dubious content and/or are redirected to other untrusted or possibly malicious si