When visited, overiesarticu[.]info leads visitors to other rogue websites or loads dubious content. There are many similar rogue websites on the internet. Some examples are alisalis[.]com, speakwithjohns[.]com and exq-timepieces[.]com. These pages are usually opened via other sites of this kind,
Locate Your Package is advertised as an app which allows users to track their packages in real time. In fact, this app is a browser hijacker designed to promote a fake search engine by assigning certain browser settings to locateyourpackagetab.com (another variant of this browser hijacker promotes
Local Weather Alerts is advertised as an app that allows people to check weather forecasts. In fact, it promotes hlocalweatheralerts.co (the address of a fake search engine) by changing browser settings and gathers browsing-related data. Local Weather Alerts is a browser hijacker, a potentially un
SearchVirtualInfo is an adware-type application that enables placement of intrusive ads on any visited website. Additionally, this app modifies browsers to promote fake search engines - behavior common to software classified as browser hijackers. Most adware programs and browser hijackers have d
greacore[.]com is a scam website, which makes deceptive claims to promote dubious applications. It states that users' iPhones have been damaged by two viruses and, to remove them, they must download and install a recommended app. These schemes are commonly used to distribute fake anti-virus too
"(3) Viruses has been detected" is a scam run on various deceptive web pages. It claims that threats have been detected on the device and recommends an untrusted piece of software to remove the fake viruses. This scheme targets iPhone users; however, it might also be accessed through other Apple
PoetRAT is the name of a Remote Access Trojan (RAT). This type of malware allows cyber criminals to monitor and control the victim's computer. In most cases, RATs such as PoetRAT are distributed to infect computers with other malware and/or steal sensitive information. This particular malware can
Thana is malicious software categorized as ransomware. This malware operates by encrypting data in order to demand ransoms for decryption. During the encryption process, files are appended with the ".thana" extension. For example, a file originally named something like "1.jpg" would appear as "1.
The internet is full of deceptive websites designed to trick people into downloading and installing various potentially unwanted applications (PUAs). This particular page encourages visitors to continue watching a video in Safe Mode and install/update AdBlocker. Research shows that this dubious
Discovered by S!Ri, ComputerDestroyer is a form of malware that locks the infected computer. In this way, it prevents victims from accessing and using their data. It also changes the desktop wallpaper, displays a pop-up window asking users to enter a 'decryption code', and plays an audio message r