The Live Protection Suite program supposedly scans systems for threats and infections, and then removes them. In fact, this is a fake antivirus suite advertised on an 'official' website and also a deceptive, scam website. Live Protection Suite is a clone of Antivirus 10, another fake antivirus sui
First discovered by Jakub Kroustek, Kjh is high-risk ransomware belonging to the Dharma ransomware family. Immediately after infiltration, Kjh encrypts most stored data, thereby rendering files unusable. Additionally, Kjh appends filenames with the ".kjh" extension plus the victim's unique ID and
"Windows Online Protection has detected spyware" is a scam designed to trick people into installing a fake antivirus tool called Live Protection Suite. This program is promoted by displaying fake virus detections on a deceptive website. In summary, this scam website informs visitors that it has d
First discovered by malware security researcher, Michael Gillespie, Muslat is one of many ransomware-type infections that belongs to the Djvu family. Following successful encryption, Muslat encrypts most stored data and renames filenames with the ".muslat" extension (e.g., "sample.jpg" becomes "sa
First discovered by Jakub Kroustek and belonging to the Dharma family, Zoh is high-risk ransomware which stealthily infiltrates systems and encrypts most stored data by compromising files. During encryption, Zoh appends filenames with the victim's unique ID, developer's email address and .zoh exte
"Youtube Lottery" Email Scam (Mac) is used to trick people into believing that they have won a YouTube lottery. The main goal of this scam is to encourage recipients to send their full names, addresses, mobile telephone numbers, and other information to scammers. Since this is merely a scam and
Robotcaptcha.info is a rogue website very similar to pushnotificationsite[.]com, pushnotificationapp[.]com, digitalsmirror[.]com, and many others. It is designed to lead visitors to other untrustworthy sites. Typically, people do not visit robotcaptcha.info willingly - they are redirected by poten
smartpackagetracker.com is a fake search engine that supposedly enhances the browsing experience by generating improved results. Judging on appearance alone, smartpackagetracker.com may seem legitimate and useful, however, this site is promoted using a browser-hijacking app called Smart Package Tr
The wscript.exe file belongs to the Microsoft Windows Operating System. Note that wscript.exe is also known as Windows Script, a service that provides the Windows system with scripting abilities. Unfortunately, cyber criminals often use the names of legitimate processes and files to disguise malwa
svchost.exe is the generic name of a legitimate Microsoft Windows process that can be found running in the Task Manager. Typically, there is more than one Service Host process running at once, since separate processes handle separate groups of services. For example, one svchost.exe process might