"Windows Defender Browser Protection" is a technical support scam. This scam model operates by warning of potential/detected infections and urging users to contact a 'legitimate' support service. The "Windows Defender Browser Protection" scheme is run on various deceptive websites. It claims that
Websites like pushbestdevice[.]com are designed to load dubious content or redirect visitors to other untrustworthy web pages. For example, balanceforsun[.]com, sawhitpew[.]site and wbamedia[.]net are examples of other sites that operate in a similar way to pushbestdevice[.]com. In most cases, th
Discovered by Karsten Hahn, Ragnarok is malicious software classified as ransomware. It operates by encrypting the data of infected devices so that ransom demands can be made for decryption. When Ragnarok ransomware encrypts, all affected files are appended with the ".ragnarok_cry" extension. To
Discovered by Michael Gillespie, Reha is malicious software belonging to the Stop/Djvu ransomware family. When a system is infected with this malware all/some data is encrypted and victims receive ransom demands for decryption tools. During encryption, files are appended with the ".reha" extension
Discovered by Michael Gillespie, Topi is a malicious program and part of the Stop/Djvu ransomware family. Systems infected with this malware have their data encrypted and receive ransom demands for decryption. When Topi ransomware encrypts, all files are appended with the ".topi" extension. For e
getmackeepersoftpro[.]xyz is a dubious website, usually opened through others of this kind, clicked deceptive advertisements or potentially unwanted applications (PUAs) that are installed on the browser and/or operating system. At the time of research, getmackeepersoftpro[.]xyz offered download
Criminals behind this scam attempt to trick recipients into transferring Dash cryptocurrency to them. They state that they have recorded a compromising video and will distribute it to other people unless recipients pay a specific cryptocurrency sum. Never trust emails of this type and simply ignor
guj5.xyz is one of many fake search engines promoted through a potentially unwanted application (PUA), a browser hijacker called CERX. This PUA is related to another app of this type called QIP. Generally, browser hijackers promote fake search engines by changing certain browser settings. Further
When opened, showeverig[.]info opens various untrustworthy websites or loads dubious content. This is a rogue website which is very similar to wbamedia[.]net, sawhitpew[.]site, fastnewstream[.]com and many others of this type. Typically, visitors do not open these sites intentionally - they are o
Easy Internet Speed Test is a rogue application supposedly designed to provide easy access to internet speed testing tools. It is categorized as a browser hijacker, due to the alterations it makes to browsers to promote search.easyinternetspeedtesttab.com, a fake search engine. Furthermore, this