Discovered by Petrovic, .vaca is a ransomware-type program that belongs to the Xorist ransomware family and is designed to jeopardize computers and their users. Cyber criminals use it to encrypt data and demand ransom payments. Once encrypted, all files are renamed by adding the new ".vaca" exten
The Cobalt Strike tool is used to detect system penetration vulnerabilities. The tool itself is supposedly used for software testing to find bugs and flaws, however, cyber criminals often take advantage of such tools, and Cobalt Strike is no exception. Research shows that these people send hundre
FormBook is a virus designed to steal personal data from victims' computers. Research shows that this malware is distributed using spam emails that contain malicious attachments. In addition, developers provide this virus as a 'service' - any aspiring cyber criminal can pay a subscription and gain
The Maps2Go app provides driving directions and is promoted as a map search application for MacOS. In fact, it is categorized as a potentially unwanted application (PUA), since developers promote it using a deceptive marketing method called "bundling". Therefore, some users install this PUA unin
nsandreskethep.club is one of many untrustworthy, rogue websites online that include butfirecrangu.club, notify-service.com, and bohemuchnehe.club. This website redirects visitors to other dubious, deceptive sites or displays untrustworthy content. Most people end up visiting this website due to p
Hancitor is a high-risk trojan-type virus. Developers proliferate this malware using various spam email campaigns such as Here Is Your Fax Email Virus, AT&T Invoice Email Virus, and many others. After successful infiltration, Hancitor introduces other malware to infect the system. Therefore,
Cyber criminals use the "UniCredit Bank Email Virus" scam to trick recipients of bogus emails into infecting their computers with a malicious program called FormBook. They proliferate an email that contains a malicious attachment that, once opened, causes the computer infection. This email is pre
Healforyou is a new variant of GlobeImposter. This malicious program is categorized as ransomware: a program that encrypts data and allows its developers to make ransom demands. Healforyou adds the ".healforyou" extension to every encrypted file. It renames "1.jpg" to "1.jpg.healforyou", and so on
Shlayer is a trojan-type virus designed to proliferate various adware and other unwanted applications, and promote fake search engines. It is typically disguised as a Adobe Flash Player installer and various software cracking tools. In most cases, users encounter this virus when visiting dubiou
Scammers use the "I'll Begin With The Most Important" deceptive email to blackmail people. The main purpose of this scam is to trick victims into paying a ransom to cyber criminals. They claim that they have recorded a compromising video of the recipient and will proliferate it unless the ransom