Recoverhelp@protonmail.ch (first discovered by security researcher @kafeine) is a new variant of Fantom - a high-risk ransomware-type virus designed to stealthily infiltrate systems and encrypt files using an asymmetric encryption algorithm. During encryption, recoverhelp@protonmail.ch displays a
search4tops.com is a deceptive website claiming to be an improved Internet search engine that supposedly generates the most relevant search results. The appearance of this site barely differs from Google, Bing, Yahoo, and other legitimate search engines. Therefore, users are often tricked into be
Crypton is a ransomware-type virus which encrypts files and appends filenames with the "_crypt" extension. For example, "sample.jpg" is renamed to "sample_crypt.jpg". Once the files are encrypted, Crypton opens a pop-up window and creates a text file ("readme_encrypted.txt"), placing it on the des
"Notice of Imposition of Fine" is ransomware that locks computer screens and accuses victims of violating cyber laws. To avoid punishment, victims must supposedly pay a fine. Be aware, however, this is a scam - cyber criminals merely attempt to trick victims into paying for nothing. On initi
Luck is file-encrypting ransomware. Following infiltration, Luck employs asymmetric cryptography (RSA-2048) to encrypt various files stored on the system. During encryption, Luck appends file names with the ".[user_id]_luck" extension (for instance, "sample.jpg" might be renamed to "sample.jpg.9DF
Similar to Donald Trump ransomware, Angela Merkel is a ransomware-type virus that encrypts various files and appends file names with the ".angelamerkel" extension. For instance, "sample.jpg" is renamed to "sample.jpg.angelamerkel". Following successful encryption, this ransomware displays a pop-up
According to the developers, gotosearch.ru is a legitimate Internet search engine that generates improved search results and, therefore, enhances users' Internet browsing experience. Judging on appearance alone, gotosearch.ru barely differs from Google, Yahoo, Bing, and other similar search engine
MyMemory is a deceptive application that supposedly provides event reminders. Initially, this functionality might appear legitimate and useful, however, MyMemory often infiltrates systems without permission. Furthermore, it records information relating to users' Internet browsing activity and dis
Webbora is a rogue application that infiltrates the system during installation of other software. Following infiltration, this app generates various intrusive online advertisements and continually records information relating to users' Internet browsing activity. For these reasons, Webbora is cate
HappyLocker is file-encryption ransomware based on Hidden Tear - an open-source ransomware project. Cyber criminals promote HappyLocker via "Instant Satoshi BOT" - a malicious application that supposedly rewards users in Bitcoins for completing various 'captchas'. Following infiltration, HappyLoc