"Transfast Email Virus" is yet another spam email campaign used to spread the Ave Maria trojan. Cyber criminals send hundreds of thousands of deceptive emails encouraging recipients to open an attached "payment slip". In fact, the file is malicious, and opening it leads to a malware infection.
advancemactools[.]live belongs to a network of websites that promote various potentially unwanted applications (PUAs) for Mac computers. Users typically visit sites such as advancemactools[.]live inadvertently, as they are redirected by intrusive advertisements (displayed on other rogue sites)
Discovered by Michael Gillespie, foSTE is high-risk ransomware that belongs to the GlobeImposter ransomware family. As with most ransomware infections, foSTE encrypts stored data, thereby rendering it unusable. Additionally, foSTE appends each filename with the ".foSTE" extension (hence its name).
Belonging to the Jigsaw ransomware family, HYDRA is a high-risk ransomware infection discovered by Michael Gillespie. After successfully infiltrating the system, HYDRA encrypts most stored files, rendering them unusable. In addition, HYDRA adds the ".HYDRA" extension to each filename (e.g., "sampl
PasteBoard (also known as PasteBoardHelper) is an ordinary adware-type application that usually infiltrates computers without users' consent. It is very likely to install together with the Spotlight.app and Spaces.app unwanted apps, which are designed to redirect users to searchbaron.com. After
news-easy[.]com is a rogue website that shares many similarities with check-out-this.site, edchargina.pro, chainthorn.com, and dozens of other rogue sites. Note that news-easy[.]com feeds users with dubious content and redirects them to other dubious sites. Research shows that users generally arr
ZeroF*cks is one of many ransomware-type infections discovered by malware researcher Petrovic. This ransomware infiltrates computers and encrypts most stored files, appending filenames with the ".zerofcks" extension (e.g., "sample.jpg" becomes "sample.jpg.zerofcks"). Once encryption is complete,
adf.ly is a legitimate website that provides a URL-shortening service. This website pays registered users for sharing shortened links, since visitors are presented with a five-second advertisement prior to being given access the chosen website. The delivered advertisements, however, might redirec
kromtech[.]net is a rogue domain used to promote MacKeeper, a potentially unwanted application (PUA). This domain redirects visitors to various landing pages that promote the MacKeeper PUA. Research shows that users typically visit kromtech[.]net inadvertently - they are redirected by PUAs alrea
Budak is high-risk ransomware that belongs to the Djvu ransomware family. As with most ransomware infections, Budak stealthily infiltrates computers, encrypts most stored files, and appends each filename with the ".Budak" extension (hence the ransomware name). For example, "sample.jpg" becomes "s