Discovered by Ravi, Teslarvng belongs to the Ouroboros ransomware family. It encrypts files, renames them, and provides victims with instructions about how to contact the developers (and other details). Teslarvng renames files by adding the de-crypt@foxmail.com email address and appending ".teslar
"Windows Was Blocked Due To Questionable Activity" is yet another scam message used to extort money from unsuspecting users. Delivered by deceptive websites, the message states that the system has been blocked and encourages users to immediately contact 'tech support' via a telephone number provid
ProcessLocator is a rogue application categorized as adware and a Potentially Unwanted Application (PUA). It is promoted as supposedly improving the browsing experience by providing accurate search results, fast searches and so on. In fact, this app diminishes the browsing experience. ProcessLo
Discovered by dnwls0719, CoronaVi2022 is a malicious program classified as ransomware. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, all affected files are renamed according to the follow
goodbase[.]biz is a rogue website sharing many common traits with 1000-dollar.cash, thefastpush.com, place-web.com and thousands of others. Visitors to this site are presented with dubious content and redirected to untrusted or even malicious pages. Websites such as goodbase[.]biz are usually ope
AphroditeResults is a rogue app, which is part of the AdLoad adware family. Following successful infiltration, it runs intrusive advertisement campaigns and delivers various undesirable and even harmful ads. AphroditeResults also has capabilities that are common to browser hijackers, which inclu
There are many 'malspam' campaigns proliferated by cyber criminals to trick recipients into infecting their computers with high-risk malware. This particular malspam campaign is disguised as an email from Cigna (health services organization) in relation to a Coronavirus insurance plan. Cyber crim
Conteban is a Trojan, a malicious program also known as Trojan-Win32/Conteban. The exact purpose of this malware is unknown, however, most Trojans operate as 'backdoors'. I.e., cyber criminals use them to gain access to the victim's system and remotely control it. Programs of this type are often
Belonging to the Matrix malware family, MDEN is an updated variant of SDEN ransomware. It operates by encrypting the data of infected systems and demanding payment for decryption tools/software. During the encryption process, all affected files are renamed according to the following pattern: cybe
SoloProcess is advertised as a tool designed to improve the browsing experience, however, it is actually a potentially unwanted application (PUA) classified as adware. Software of this type displays various advertisements. Adware-type apps also operate as information tracking tools - they gather