When installed on devices, internet browsers automatically force-open fake or legitimate search engines (and/or other dubious websites). Typically, these redirects occur when attempts are made to search via the URL bar or when a new browser tab/window is opened. Dubious software within the brow
Flare Search is a browser hijacker. Following successful infiltration, it makes modifications to browser settings to promote a fake search engine. Flare Search promotes flaresearch.net in this way. This software also adds the "Managed by your organization" feature to Google Chrome browsers, for th
Repter is a new variant of Fonix ransomware. Systems infected with this malware experience data encryption and users receive ransom demands for decryption tools/software. During the encryption process, all compromised files are renamed according to this pattern: original filename, cyber criminals'
Blast Search is rogue software classified as a browser hijacker. Following successful infiltration, it makes alterations to browser settings to promote a fake search engine. Blast Search promotes blast-search.net in this way. Additionally, it has data tracking capabilities, which are employed to m
Discovered by Marcelo Rivero, Homer is a malicious program belonging to the Dharma ransomware family. This malware operates by encrypting the data of infected systems in order to demand payment for decryption. During the encryption process, all affected files are renamed according to this pattern
Easy Weather Today Promos is rogue software endorsed as a tool for quick access to weather-related content and classified as adware. In fact, it operates by delivering intrusive advertisement campaigns. I.e., it delivers various unwanted and even harmful ads. Additionally, Easy Weather Today Prom
Btc is a malicious program belonging to the Jigsaw ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all compromised files are appended with the ".btc" extension. For example, a file ori
"Salesforce" is the name of a spam email campaign designed to proliferate the Gozi Trojan. The term "spam campaign" refers to a large-scale operation, during which deceptive emails are sent by the thousand. The scam messages of this spam campaign are disguised as order confirmation notifications f
Discovered by Jakub Kroustek, .data is a malicious program that is part of the Dharma ransomware family. It is designed to encrypt data and demand payment for decryption. During the encryption process, all files are renamed following this pattern: original filename, unique ID, cyber criminals' em
FunctionRecord is dubious software classified as adware and also with characteristics typical of browser hijackers. Following successful installation, it runs intrusive ad campaigns, modifies browser settings and promotes fake search engines. FunctionRecord promotes Safe Finder through akamaihd.