PasteBoard (also known as PasteBoardHelper) is an ordinary adware-type application that usually infiltrates computers without users' consent. It is very likely to install together with the Spotlight.app and Spaces.app unwanted apps, which are designed to redirect users to searchbaron.com. After
news-easy[.]com is a rogue website that shares many similarities with check-out-this.site, edchargina.pro, chainthorn.com, and dozens of other rogue sites. Note that news-easy[.]com feeds users with dubious content and redirects them to other dubious sites. Research shows that users generally arr
ZeroF*cks is one of many ransomware-type infections discovered by malware researcher Petrovic. This ransomware infiltrates computers and encrypts most stored files, appending filenames with the ".zerofcks" extension (e.g., "sample.jpg" becomes "sample.jpg.zerofcks"). Once encryption is complete,
adf.ly is a legitimate website that provides a URL-shortening service. This website pays registered users for sharing shortened links, since visitors are presented with a five-second advertisement prior to being given access the chosen website. The delivered advertisements, however, might redirec
kromtech[.]net is a rogue domain used to promote MacKeeper, a potentially unwanted application (PUA). This domain redirects visitors to various landing pages that promote the MacKeeper PUA. Research shows that users typically visit kromtech[.]net inadvertently - they are redirected by PUAs alrea
Budak is high-risk ransomware that belongs to the Djvu ransomware family. As with most ransomware infections, Budak stealthily infiltrates computers, encrypts most stored files, and appends each filename with the ".Budak" extension (hence the ransomware name). For example, "sample.jpg" becomes "s
Easy Photo Edit is a rogue application that supposedly allows users to access various photo editors. Its appearance suggests that Easy Photo Edit is legitimate and useful, however, it is categorized as a browser hijacker and a potentially unwanted application (PUA). There are three main reasons f
Ims00ry is yet another ransomware-type infection discovered by MalwareHunterTeam. After successful infiltration, Ims00ry encrypts most stored data, thereby rendering it unusable. Unlike other ransomware, however, Ims00ry does not append any extension, nor rename compromised files in any other way.
Spotlight (or Spotlight.app) is a rogue application designed to promote the searchbaron.com website. Unlike other browser-hijacking applications, Spotlight does not modify any system/browser settings - it simply redirects users to searchbaron.com whenever they enter a search query. Spotl
First discovered by malware researcher, Amigo-A, Adame is yet another variant of high-risk ransomware called Phobos. After successful infiltration, Adame encrypts most stored data, thereby rendering it completely unusable. Additionally, Adame appends each filename with the victim's unique ID, dev