EasyWay supposedly allows users to quickly search for places, get directions, and see live maps directly from a new browser tab or window. This app may seem to be a legitimate tool, however, it is a browser hijacker that changes settings and collects user-information. Since most people download a
inspiranius[.]com is a rogue site, similar to lesindingretne.info, prioritynotifications.com, dingboronhartal.pro, and others. It redirects users to other compromised and/or potentially harmful sites, which proliferate dubious content. Using social engineering tactics, inspiranius[.]com tricks use
Sakula is software categorized as a remote access trojan (RAT). Generally, programs of this type are used by cyber criminals to control infected computers remotely and perform tasks that enable them to generate revenue in various ways. Typically, victims are unaware that the Sakula RAT is install
Coharos is yet another ransomware-type infection from the Djvu family. This malware is designed to stealthily infiltrate computers and encrypt most stored data. During encryption, Coharos appends each filename with the ".coharos" extension (hence its name). For example, "sample.jpg" is renamed to
DarkComet is the name of a remote access/administration tool (RAT). Programs of this type are designed to control systems through a remote network connection. I.e., to control computers and perform various tasks remotely using another computer. Cyber criminals often try to trick people into insta
Discovered by Alex Svirid, Yoba is categorized as ransomware. Ransomware-type programs are used to extort money from people with infected computers. They are designed to encrypt files and prevent access unless victims pay the ransom. Like most programs of this type, Yoba renames encrypted files an
Discovered by dnwls0719, 2k19cry is a part of the Paradise ransomware family (and similar to 2k19sys). These programs are designed to encrypt (lock) files and deny access to them unless a ransom is paid. This particular ransomware renames all encrypted files by adding a random string of character
First discovered by Michael Gillespie and belonging to the Djvu ransomware family, Mtogas is yet another high-risk program. The purpose of this infection is to infiltrate computers and compromise data by encryption, keeping it this state unless a ransom is paid. Mtogas also renames each file by ad
The My Mail Center app supposedly allows users to manage multiple email inboxes using quick links, however, this app also changes browser settings to promote a fake search engine (mymailcenter.co) and collects data relating to users' browsing habits. Apps of this type are called browser hijackers
searchberry.co is the web address of a fake search engine, however, developers present it as a legitimate and useful search tool. Typically, search engines of this kind are promoted through browser hijackers (in this case, the Searchberry Home Page app). This app promotes searchberry.co by changi