routemob[.]com opens dubious websites or loads unwanted content. There are are many websites similar to routemob[.]com on the internet. Some examples are rministencew[.]club, news-back[.]best and sombes[.]com. Note that users do not often visit these sites intentionally - they are opened by instal
"SD BIOSENSOR" is yet another Coronavirus/COVID-19-themed spam campaign. The term "spam campaign" is used to define a large scale operation, during which thousands of deceptive/scam emails are sent. The messages are disguised as mail from a legitimate global bio-diagnostic company (SD BIOSENSOR).
Discovered by Michael Gillespie, Fob is variant of WannaScream ransomware. Fob encrypts victims' files, modifies their filenames, creates and displays a ransom message. It renames encrypted files by adding the victim's ID and decrypt25@protonmail.com email address, and appending the ".Fob" extensi
Typically, scammers behind phishing emails seek to trick recipients into divulging various personal information. For example, passwords (login credentials), credit card details, and/or transferring certain sums of money. Scammers send this particular email to deceive people into believing that th
GraceWire is malicious program classified as an information-stealing Trojan (stealer). Malware within this classification targets a wide variety of data and can cause especially serious issues. GraceWire has been observed being proliferated through a malicious website, which asks users to perform
FRAT is a Remote Access Trojan (RAT), a type of malware program that allows cyber criminals responsible to monitor and control the infected computer. Generally, users install RATs on their computers inadvertently. The malware is used to infect computers with other software of this kind and/or ste
Moba is malicious software belonging to the Djvu ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, files are appended with the ".moba" extension. To elaborate, following en
Belonging to a ransomware family called Djvu, Pykw encrypts files, appends its extension to each encrypted file, and creates a ransom message. For example, it would rename "1.jpg" to "1.jpg.pykw", "2.jpg" to "2.jpg.pykw", and so on. Instructions about how to contact the cyber criminals behind Pyk
CollectorStealer (also known as DCStealer) is malicious software which allows cyber criminals to steal various sensitive information (e.g. passwords, credit card details) and files. This malware is for sale on a hacker forum for $12 or $75 (depending on the subscription type). It is advertised on
Image Seeker is a browser hijacker which assigns certain browser settings to image-seeker.com. In this way, the app promotes the fake search engine web site. Most browser hijackers also track and record information. Typically, users download and install apps such as Image Seeker unintentionally a