Belonging to the Matrix malware family, MDEN is an updated variant of SDEN ransomware. It operates by encrypting the data of infected systems and demanding payment for decryption tools/software. During the encryption process, all affected files are renamed according to the following pattern: cybe
SoloProcess is advertised as a tool designed to improve the browsing experience, however, it is actually a potentially unwanted application (PUA) classified as adware. Software of this type displays various advertisements. Adware-type apps also operate as information tracking tools - they gather
Hide My History is the name of a browser hijacker, a potentially unwanted application (PUA) that promotes hidemyhistory.co, the address of a fake search engine. Generally, browser hijackers promote these addresses by changing certain browser settings. Furthermore, most apps of this type operate a
Free Package Tracker Promos is categorized as adware and promoted as a free tool for easy access to various package tracking services. It operates by running intrusive advertisement campaigns. Therefore, it delivers unwanted, deceptive and even harmful ads. Furthermore, it gathers browsing-relate
The Maps & Directions Online Promos application apparently allows users to search for directions and maps, however, it operates as adware and displays various advertisements. People do not generally download or install apps of this type intentionally and, therefore, they are classified as pote
Discovered by Jakub Kroustek, Mark (Dharma) is a part of the Dharma ransomware family. This ransomware renames all encrypted files by adding the victim's ID, mark_white@mail.ua email address, and ".Mark" extension to filenames. For example, a file named "1.jpg" might become "1.jpg.id-1E857D00.[mar
Discovered by Petrovic, Voyager is a new variant of Hermes837 ransomware. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all affected files are appended with the ".voyager" extension. For example, a fil
SpeedyFixer is advertised as software that boosts computer speed and fixes various errors, crashes and application freezes. In fact, it is classified as a potentially unwanted application (PUA) due to its associated distribution methods (SpeedyFixer is promoted by including it into the set-ups of
Gourluck is a group of deceptive sites. These web pages run various scams, including a commonly promoted scheme called "Dear Safari User, You Are Today's Lucky Visitor". Few users enter these websites intentionally - most are redirected to them by intrusive ads or Potentially Unwanted Applicatio
Discovered by S!Ri, Adhubllka is a malicious program classified as ransomware. Systems infected with this malware have their data encrypted and users receive ransom demands for appropriate decryption tools/software. When Adhubllka encrypts, it renames files by adding the ".ADHUBLLKA" extension. F