"Windows Online Protection has detected spyware" is a scam designed to trick people into installing a fake antivirus tool called Live Protection Suite. This program is promoted by displaying fake virus detections on a deceptive website. In summary, this scam website informs visitors that it has d
First discovered by malware security researcher, Michael Gillespie, Muslat is one of many ransomware-type infections that belongs to the Djvu family. Following successful encryption, Muslat encrypts most stored data and renames filenames with the ".muslat" extension (e.g., "sample.jpg" becomes "sa
First discovered by Jakub Kroustek and belonging to the Dharma family, Zoh is high-risk ransomware which stealthily infiltrates systems and encrypts most stored data by compromising files. During encryption, Zoh appends filenames with the victim's unique ID, developer's email address and .zoh exte
"Youtube Lottery" Email Scam (Mac) is used to trick people into believing that they have won a YouTube lottery. The main goal of this scam is to encourage recipients to send their full names, addresses, mobile telephone numbers, and other information to scammers. Since this is merely a scam and
Robotcaptcha.info is a rogue website very similar to pushnotificationsite[.]com, pushnotificationapp[.]com, digitalsmirror[.]com, and many others. It is designed to lead visitors to other untrustworthy sites. Typically, people do not visit robotcaptcha.info willingly - they are redirected by poten
smartpackagetracker.com is a fake search engine that supposedly enhances the browsing experience by generating improved results. Judging on appearance alone, smartpackagetracker.com may seem legitimate and useful, however, this site is promoted using a browser-hijacking app called Smart Package Tr
The wscript.exe file belongs to the Microsoft Windows Operating System. Note that wscript.exe is also known as Windows Script, a service that provides the Windows system with scripting abilities. Unfortunately, cyber criminals often use the names of legitimate processes and files to disguise malwa
svchost.exe is the generic name of a legitimate Microsoft Windows process that can be found running in the Task Manager. Typically, there is more than one Service Host process running at once, since separate processes handle separate groups of services. For example, one svchost.exe process might
First discovered by malware security researcher, Sandor Nemes, Ghost (Jamper) is new variant of high-risk ransomware called Jamper. Once infiltrated, Ghost (Jamper) encrypts most stored files and appends filenames with a random string, probably comprising the victim's unique ID (e.g., "sample.jpg
Discovered by Michael Gillespie, DDT is part of GlobeImposter, a family of ransomware-type programs. Like most programs of this type, DDT encrypts files stored on computers and keeps them locked unless a ransom is paid (victims purchase a decryption tool that can decode files encrypted by DDT). I