Discovered by Alex Svirid, Lazarus ransomware is derived from King Ouroboros, another ransomware-type program. Ransomware encrypts data (blocking access to it). Cyber criminals create these programs to extort money from victims by demanding ransom payments in return for a decryption tool and/or ke
First discovered by malware researcher, Raby, Adage is yet another variant of high-risk ransomware called Phobos. This malware is designed to stealthily infiltrate computers and encrypt most stored files, thereby rendering them unusable. Additionally, Adage renames each file by appending the victi
TheMediaConverter Promos is a rogue application that supposedly allows conversion of various documents and video/audio files. This functionality may seem legitimate and useful, however, TheMediaConverter Promos is categorized as a potentially unwanted application (PUA) and adware. The main reason
"Get rid of Junk Files" is a phrase used within a scam website. Like most web pages of this type, it advertises a potentially unwanted application (PUA). In this case, scammers use it to promote a PUA named Cleanup My Mac. Do not trust this or other scam sites. The same applies to applications
FastFileConvert is a browser hijacker, promoted as a free file converter, capable of converting thousands of file types. It is accompanied by a fake search engine - fastfileconvert.com. It is considered a PUA (potentially unwanted application), as it is often installed inadvertently. FastFileConv
Retefe is a high-risk trojan designed to target victims' bank accounts. Developers proliferate Retefe using spam email campaigns and an exploit kit called EternalBlue (you can read more about it in this article). In the case of spam email campaigns, users receive a malicious attachment (document)
"Your system is seriously damaged, found (4) viruses!" is a scam created to promote/advertise a potentially unwanted application (PUA) called Cleanup My Mac. In fact, it might also be used to advertise other apps. These web pages are used to trick people into installing PUAs using deceptive me
Nerinlelighda[.]pro is a rogue site. It operates by causing redirects to other compromised, possibly malicious websites and presents users with highly suspect content (including click-bait). There are thousands of rogue sites (watchonline.click, viralupdatestoday.com, exclusivenotifications.com, t
Discovered by Michael Gillespie and part of the Djvu ransomware family, Carote is a malicious program designed to encrypt files and prevent access to them. Once a computer is infected with Carote, the program renames all encrypted files by adding the ".carote" extension. For example, "1.jpg" beco
Leadcolas[.]com is a rogue site, designed to redirect visitors to untrustworthy and malicious websites, as well as force-feed them highly dubious content. It shares many similarities with rembrandium.com, ernorvious.com, getmedia.me and innumerous others. It should be noted that few ever access le