Comrade Circle is newly-discovered ransomware similar to Fantom. Following infiltration, Comrade Circle encrypts files and renames them using a "[6-16 random symbols].comrade" pattern. For instance, "sample.jpg" might be renamed to "sdf9K21a=G.comrade". Updated variants of this ransomware use .en
K0stia is a ransomware-type virus distributed via spam emails (with malicious .exe attachments claiming to be .pdf files). When these malicious files are opened, ransomware starts encrypting files using AES-256 cryptography. This virus appends a ".k0stia" extension to the name of each encrypted fi
Isanalyze.com is a deceptive website to which users are redirected after clicking intrusive pop-up advertisements. These ads are displayed by various adware-type applications that usually infiltrate the system during installation of regular software. As well as displaying advertisements, adware co
Smartnewtab.com is a rogue site, which users are redirected to by various intrusive pop-up advertisements. These ads are displayed by adware-type applications that infiltrate the system during installation of regular software. As well as display of unwanted ads, adware also collects information re
Developers present gotoinstall.ru as an Internet search engine that enhances the Internet browsing experience by generating improved search results. Some users believe that gotoinstall.ru is a legitimate and useful website, however, this site is promoted using rogue software download/installation
HPRewriter is a bogus application that infiltrates the system during installation of various software. Following successful installation without users' consent, HPRewriter hijacks Internet browsers and stealthily modifies various options. In addition, this rogue app collects information relating t
Hades Locker is an updated version of WildFire Locker ransomware that infiltrates systems and encrypts a variety of data types using AES encryption. Hades Locker appends the names of encrypted files with the ".~HL[5_random_characters] (first 5 characters of encryption password)" extension. In add
Research Soft is a deceptive program that claims to provide "best" online shopping offers based on collected information relating to Internet browsing activity. These claims often trick users into believing that Research Soft is a legitimate and useful application, however, this app often infiltr
GeoByPass is a rogue application that supposedly allows users to access various websites that are blocked in their countries. This functionality may appear legitimate and useful, however, GeoByPass is distributed using the "bundling" method and, thus, often infiltrates systems without users' conse
KillerLocker is a ransomware-type virus designed to encrypt files. During encryption, KillerLocker appends the ".rip" extension to the name of each compromised file. For instance, "sample.jpg" is renamed to "sample.jpg.rip". A window informing victims of the encryption is then displayed. Kille