Rapid (.cryptolocker) is a malicious software that encrypts data so that victims could not access their files unless they decrypt them with a private key and decryption software that can be purchased from cyber criminals who developed this ransomware. It renames all files by changing their filenam
Discovered by dnwls0719, NEMTY 2.3 REVENGE is an updated variant of NEMTY REVENGE 2.2 ransomware. This piece of malicious software is designed to encrypt data and then demand payment (ransom) for decryption. During the encryption, all affected files are retitled with an extension, consisting of "
Bambootornado[.]pw is a website that should not be trusted, it encourages visitors to update Adobe Flash Player with a fake updater. Its installation includes two potentially unwanted applications (PUAs): an adware-type app called MyCouponsmart and another shady app called Media Player. Typical
yourfine4upgradefree[.]best is a deceptive/scam site that operates by claiming that it will update Adobe Flash Player. Instead, it promotes a fake updater. Fraudulent software updaters are used to proliferate various Potentially Unwanted Applications (PUAs) and malicious content (e.g. ransomwar
the mob1ledev1ces[.]com site is designed to download a .dmg file, a fake installation setup disguised as an Adobe Flash Player installer. Typically, fake Adobe Flash Player installers and updaters are designed to distribute potentially unwanted applications (PUAs) such as browser hijackers, adwa
FlowAds is adware, which is endorsed to enhance the browsing experience. It is supposedly capable of providing additional and improved search results, however, it actually runs intrusive advertisement campaigns, which significantly diminish the browsing experience. Furthermore, it possess data tr
mkob.xyz is the address of a fake search engine. Typically, fake search engines are promoted through browser hijackers, potentially unwanted applications (PUAs) that change certain browser settings. Note that mkob.xyz is promoted through a PUA called CERX, however, other apps (such as APP) can als
Mkos is malicious software belonging to the Stop/Djvu ransomware family. It operates by encrypting data and demanding ransom payments for decryption. During the encryption process, all filenames are appended with the ".mkos" extension. For example, "1.jpg" appears as "1.jpg.mkos", and so on for a
RedRum encrypts files, rendering them inaccessible unless victims recover them with decryption software and keys that can purchased from the cyber criminals who designed this ransomware. RedRum renames all encrypted files by adding the victim's ID and moncler@tutamail.com email address to their fi
Discovered by GrujaRS, Chch is a ransomware infection. This malicious software is designed to encrypt data and demand ransom payments for decryption tools/software. When Chch encrypts, all affected files are renamed with the ".chch" extension. For example, "1.jpg" would appear as "1.jpg.chch" fol