Wisdomeyes (Win32/Wisdomeyes) is malicious software that can hijack browsers (changing the settings), download and install other malicious programs, steal private information, display advertisements, create unwanted tasks, and modify system files. It can seriously damage operating systems and cau
Discovered by Michael Gillespie, Besub is a ransomware-type infection that belongs to the Djvu ransomware family. After successful infiltration, Besub locks (encrypts) most stored files and appends filenames with the ".besub" extension (e.g., "sample.jpg" is renamed to "sample.jpg.besub"). Encryp
Transit Maps Directions is a browser app that provides local maps, driving directions, and other features that can be accessed from a new browser window or tab. In fact, this app is distributed by bundling it into the set-ups of other programs. For this reason, Transit Maps Directions is likely to
The Mycouchtuner website contains many TV series - users can search for their favourite shows and watch them online. Note, however, that this site contains links to illegal movie streaming websites and uses rogue advertising networks (it redirects visitors to dubious web pages). We advise against
TheCookingClub (also known as The Cooking Club) is a browser-hijacking application that claims to provide access to various food recipes. Initially, this application may seem legitimate and useful, however, TheCookingClub is categorized as a potentially unwanted application (PUA) and a browser hi
freshaudio[.]net is yet another rogue website designed to redirect users to other dubious sites and deliver potentially malicious content. This site is very similar to hundreds of others of this type including mediafresh.online, sinentoldrewhap.pro, and seceno.com. Research shows that many users
streamnotify[.]net is a rogue website that shares similarities with mvideo.pro, mediafresh.online, and many others. Once opened, streamnotify[.]net delivers certain dubious content and/or redirects users elsewhere. Most visitors arrive at streamnotify[.]net inadvertently - they are redirected by
CrescentCore is the name of a malicious program also known as OSX/CrescentCore. This is malware that might be used to install other rogue software (e.g., Advanced Mac Cleaner) or malicious Safari browser extensions. CrescentCore is distributed through a fake Flash Player installer/updater. Note
Dridex (also known as Bugat and Cridex) is a malicious program that is used to steal banking credentials from users of Windows computers. Cyber criminals proliferate this rogue software when it is downloaded and installed through a malicious Microsoft Word or Excel document. Once installed, it ta
Discovered by Michael Gillespie, CAGO is high-risk ransomware designed to lock (encrypt) most stored files, thereby rendering them unusable. During encryption, CAGO appends filenames with the ".CAGO" extension (hence its name). For example, "sample.jpg" is renamed to "sample.jpg.CAGO". The files