Discovered by malware security researcher, Marcelo Rivero, OGONIA is an updated version of a ransomware-type virus called CryptoMix. Once infiltrated, this ransomware encrypts various data and renames files using the "[32_random_letters_and_digits].OGONIA" pattern. For instance, "sample.jpg" migh
3301 is an updated version of ransomware-type malware called Karmen. This malware is developed using an open-source ransomware project, Hidden Tear. Once infiltrated, 3301 encrypts various files using the AES encryption algorithm. In addition, this ransomware appends filenames with the ".3301" ex
According to developers, zinkwink.com is a "high-quality" Internet search engine that generates improved search results and, therefore, enhances the browsing experience. This site may seem legitimate and useful, however, Judging on appearance alone, zinkwink.com barely differs from Google, Yahoo,
Developers present feed.snowbitt.com as an Internet search engine that significantly enhances the browsing experience by generating improved results. Judging on appearance alone, feed.snowbitt.com barely differs from Yahoo, Bing, Google, and other reputable search engines. Therefore, many users
Developers present searchprivacy.co as a legitimate Internet search engine that generates improved search results and protects users' privacy. Initially, this functionality may appear legitimate and useful, however, developers promote searchprivacy.co via deceptive software download/installation
Incognito Start Button is a deceptive application that supposedly allows users to open browsers in 'Incognito' mode. Initially, this functionality may seem legitimate and useful, however, Incognito Start Button is categorized as a potentially unwanted program (PUP) and adware. There are three mai
"Windows 10 Technical Support" is a fake service promoted via a deceptive website that users often visit inadvertently - they are redirected by various potentially unwanted programs (PUPs) that infiltrate systems during installation of regular programs (the "bundling" method). As well as causing
Aleta is an updated version of a ransomware-type virus called BTCWare. Once infiltrated, Aleta encrypts data and appends the "[developers'_email].aleta" extension to the name of each encrypted file (for example, "sample.jpg" might be renamed to a filename such as "sample.jpg.[chines34@protonmail.c
According to the developers, tabquery.com significantly enhances the browsing experience by generating improved search results. Judging on appearance alone, tabquery.com barely differs from Bing, Yahoo, Google, and other legitimate search engines. Therefore, many users believe that this site is a
RobinHood is a ransomware-type virus discovered by malware security researcher S!Ri. Once infiltrated, this malware encrypts stored data and appends names of compromised files with the ".Robinhood" extension. For instance, "sample.jpg" is renamed to "sample.jpg.RobinHood". Following successful en