Discovered by Michael Gillespie, "CRITICAL WARNING!" is a fake security warning categorized as a tech-support scam. Its main purpose is to trick people into contacting scammers via the telephone number provided. This scam is displayed in full-screen mode, and thus cannot be closed in the normal wa
MacSecurityPlus is an adware-type application that people usually download and install unintentionally. Once installed, it tracks (records) users' browsing activity and displays various pop-ups ads. It also prevents users from closing the Safari and Google Chrome browsers - it reopens them when
The newchannel[.]club website is virtually identical to hatnofort[.]com, terjuscalbuttont[.]info, ninghimpartidi[.]info and many others of this type. When opened, it displays dubious content or causes redirects to other untrustworthy sites. Typically, people are redirected to newchannel[.]club by
"Hard Drive Safety Delete" is a tech-support scam promoted via a deceptive, untrustworthy website. The main purpose of these scam pages is to trick people into calling scammers who then try to extort money by offering purchase of dubious software or use of paid technical services. Websites of thi
First discovered by GrujaRS and belonging to the Phobos ransomware family, Phoenix-Phobos is high-risk ransomware designed to encrypt data and make ransom demands. During encryption, Phoenix-Phobos renames each file by appending the filenames with the ".phoenix" extension plus the victim's unique
The natnofort[.]com website operates in a very similar manner to other pages of this type such as arberittertwa[.]info, vercallactont[.]com, and butitereventwil[.]info. When opened, it causes redirects to other rogue sites or simply displays dubious content. People do not generally arrive at this
Discovered by Michael Gillespie and belonging to the Djvu ransomware family, Moresa is a malicious program categorized as ransomware. Typically, cyber criminals use programs of this type to encrypt data and prevent victims from accessing their files unless a ransom is paid (decryption tool is purc
First discovered by malware researcher Petrovic, Norvas is yet another ransomware-type virus belonging to the Djvu malware family. As with other infections of this type, Norvas encrypts most stored files (thereby rendering them unusable) and appends filenames with an extension (in this case, ".no
apple.com-fast[.]live (www.apple.com-fasting.live or www.apple.com-faster.live) is a scam website that should not be trusted. Its purpose is to trick people into downloading and installing the CleanupMy-Mac potentially unwanted app (PUA). To achieve this, scammers designed apple.com-fast[.]live
Like many other websites of this type, terjuscalbuttont[.]info is designed to cause redirects to other untrustworthy, potentially malicious websites or to display dubious content. Some examples of websites that are similar to terjuscalbuttont[.]info include vercallactont[.]com, butitereventwil[.]i