Cyber criminals often attempt to deceive users into installing malware on the operating system by sending emails that contain malicious attachments (or website links that download the malicious files). Their main goal is to trick recipients into opening the dangerous files, which install malicious
From the same developers as the Inlog Optimizer PUA (Potentially Unwanted Application), InLog is a rogue browser and based on a legitimate, open-source project called Chromium. While promoted as genuine software, using it significantly diminishes the browsing experience. It operates as adware and
Based on other ransomware named Hakbit, SERVO99 (also known as BSJB) was discovered by James. SERVO99 encrypts files, changes the desktop wallpaper and drops a ransom message in all folders that contain encrypted data. It renames encrypted files by appending the ".crypted" extension to filenames.
Discovered by malware researcher, Raby, 8800 is a malicious program belonging to the Dharma ransomware family. This malware is designed to encrypt the data of infected systems and demand payment for decryption. During the encryption process, all affected files are renamed according to the followi
cc[.]vc offers URL (web address) shortening services, however, it also employs rogue advertising networks. Visitors to this site are presented with various dubious and harmful ads and/or are redirected to other untrusted and possibly malicious web pages. Therefore, you are strongly advised against
SearchWebSvc is one of the potentially unwanted applications (PUAs) that are part of the AdLoad adware family. These apps are designed to feed users with various intrusive advertisements and promote the address of a fake search engine. SearchWebSvc promotes akamaihd.net, an address that redire
Discovered by Jakub Kroustek, PLEX is malicious software belonging to the Crysis/Dharma ransomware family. Systems infected with this malware have their data encrypted and demand ransom payments for decryption. During the encryption process, all compromised files are renamed according to the foll
There are many websites that are designed to deceive visitors into using a fake Adobe Flash Player installer, which supposedly updates the currently installed version. These fake installers are designed to install browser hijackers, adware and other potentially unwanted applications (PUAs). In so
Barak is a malicious program belonging to the Phobos ransomware family. It operates by encrypting data and demanding payment for decryption tools/software. During the encryption process, files are renamed with the following pattern: original filename, unique ID, cyber criminals' email address and
"Secret Love" is a spam email campaign that cyber criminals employ to trick recipients into extracting an attached ZIP archive file and executing the resultant JavaScript (.js) file. If executed, this file installs NEMTY 2.5 REVENGE ransomware. We strongly advise that you ignore this email and, mo