Defray is a ransomware-type virus discovered by malware security researchers from Proofpoint. Once infiltrated, Defray encrypts stored data using AES-256, RSA-2048, and SHA-2 cryptographies. Unlike other similar malware, Defray does not rename or append extensions to encrypted files. Following su
Search In Tabs is a deceptive application that supposedly allows users to search the Internet directly from opened browsing tabs. Judging on appearance alone, Search In Tabs may seem to be a legitimate and useful app, however, it is categorized as a potentially unwanted program (PUP) and adware.
According to the developers, safeforsearch.net is a legitimate Internet search engine that significantly enhances the browsing experience by generating improved results. Initially, safeforsearch.net may appear legitimate and useful, however, this website is promoted using rogue download/installat
Discovered by malware security researcher, Karsten Hahn, CYRON is a ransomware-type virus that stealthily infiltrates systems and encrypts various files. During encryption, it appends ".CYRON" to the name of each file (for example, "sample.jpg" is renamed to "sample.jpg.CYRON"). Following success
Similar to g-search.pro, privacyassistant.net is a fake Internet search engine that falsely claims to enhance the web browsing experience by generating improved results. Judging on appearance alone, this site barely differs from legitimate search engines such as Google, Bing, Yahoo, etc. Therefor
Discovered by Michael Gillespie, Nuclear is a new variant of a ransomware-type virus called BTCWare. Once infiltrated, Nuclear encrypts various stored files and appends the ".[email].nuclear" extension to the name of associated filenames (for example, "sample.jpg" is renamed to "sample.jpg.[blac
Shield Defense is a deceptive application that supposedly protects computers from various malware infections and blocks tracking of Internet browsing activity. Judging on appearance alone, Shield Defense may seem legitimate and useful, however, this app infiltrates systems without permission. Fur
"You may have suspicious activity on your PC" is a fake error message displayed by a malicious website that users visit inadvertently - they are redirected by various potentially unwanted programs (PUPs) that infiltrate systems without permission (the "bundling" method). As well as causing redire
First discovered by MalwareHunterTeam, EMPTY is a new variant of a ransomware-type virus called CryptoMix. Once infiltrated, EMPTY encrypts various stored files and renames them using the "[32_random_characters_and_digits].EMPTY" pattern. For instance, "sample.jpg" might be renamed to a filename
Similar to Ransomware Detected, Error Virus - Trojan Backdoor Hijack, Your Windows Is Infected, and many others, "Suspicious Incoming Network Connections" is a fake error message displayed by a malicious website that users often visit inadvertently - they are redirected by potentially unwanted pro