Rhino is a part of the Dcrtr ransomware family. Like other malware of this type, it encrypts files on infected systems and encourages victims to pay a ransom to recover them. Rhino renames encrypted files by adding the generalchin@countermail.com email address and appending the ".rhino" extension
Lesli is a malicious program belonging to the CryptoMix ransomware family. This malware operates by encrypting the data of infected systems and demanding payment for decryption tools/software. When Lesli ransomware encrypts, files are renamed according to this pattern: original filename, cyber cr
PanelStyle is a rogue app, categorized as adware. It delivers various intrusive advertisements, which seriously diminish browsing quality. Additionally, PanelStyle possesses browser hijacker traits, e.g. browser modifications and fake search engine promotion. This application promotes Safe Find
AppliedReview is an adware-type potentially unwanted application (PUA), which is designed to serve advertisements and promote Safe Finder by opening it through akamaihd.net. Commonly, apps such as AppliedReview gather browsing-related and other information. This app is categorized as a PUA, sinc
Discovered by Jakub Kroustek, Dec is a part of the Dharma ransomware family. This malicious program encrypts files, modifies their filenames and provides victims with instructions about how to contact the developers in a pop-up window and text file (these are ransom messages). Dec renames encrypt
Jquerysxur is a group of deceptive websites promoting various online schemes. Sites belonging to this group have been observed promoting variants of the "You've Made The 5-billionth Search" and "Latest version of Adobe Flash Player" scams. It is also possible that other schemes can be accessed t
NationalSpecial is an adware-type application. As well as running intrusive ad campaigns, it also possess certain characteristics common to browser hijackers, such as browser modification and fake search engine promotion. This app promotes Safe Finder through akamaihd.net. Furthermore, most adw
apple-warning[.]com is one of many sites claiming that visitors' devices are infected with viruses and encouraging them to download and install a potentially unwanted application (PUA) to supposedly remove detected threats. Typically, people do not visit addresses such as apple-warning[.]com in
The main purpose of CommonAdmin is to feed users with advertisements and promote the Safe Finder web page via akamaihd.net. This application is also likely to operate as an information tracking tool. Few users download or install adware intentionally and, therefore, these programs are categorize
Guildma is malicious software exclusively targeting Brazil and classified as a banking Trojan. While some variants of this malware have been updated to widen its range to other territories, no observations have been made of such attacks being carried out. Furthermore, later versions had these cap