Scleriends[.]website is a rogue page designed to load dubious content and/or redirect visitors to other untrustworthy or possibly dangerous sites. There are thousands of rogue webpages on the Internet; play-new-vids.com, retressive.website, byluxrayor.com - are but a few examples. Users seldom ac
"Oxford Dictionary" is a rogue browser extension promoted as an easy access tool to the online version of the Oxford dictionary. However, it operates as adware. In other words, this piece of software delivers various intrusive advertisements. Additionally, this "Oxford Dictionary" extension has d
F1 is a ransomware belonging to the NEFILIM malware family. Systems infected with this malicious software experience data encryption and receive ransom demands for the decryption tools. In other words, F1 malware operates by locking victims' files in order to demand payment for access/use recovery
One of the most commonly used ways to deliver malware is to send emails with malicious links or files (attachments) in them. Cybercriminals behind this particular email attempt to trick users into downloading and opening a malicious document designed to install RustyBuer. Typically, emails
Play-new-vids[.]com is a website designed to display deceptive content and open untrustworthy websites (it depends on the geolocation of its visitors). More examples of websites like play-new-vids[.]com are byluxrayor[.]com, deeepmedia[.]biz, and trking[.]xyz. As mentioned in the introduct
StreamSearching is a browser hijacker promoting the streamsearching.com fake search engine. This piece of software operates by making modifications to browser settings to cause redirects to streamsearching.com. Additionally, StreamSearching has data tracking abilities, which are used to spy on use
RustyBuer is the name of a new variant of the Buer loader. The main difference between the new and the original variants is that one is written in Rust multi-paradigm programming language, and another one is written in C programming language. Both RustyBuer and Buer function as loaders - they infe
Hive is a ransomware-type program. It operates by encrypting data and demanding ransoms for the decryption. In other words, this malware renders files inaccessible and demands payment for access recovery. During the encryption process, affected files are renamed following this pattern: original f
ThePDFConverterSearch is a potentially unwanted application (PUA), a browser hijacker designed to change a browser's settings to thepdfconvertersearch.com (to promote a fake search engine). It is worth mentioning that this application can read browsing history and possibly other browsing-related o
MacRunnerDaemon, or simply MacRunner, is a rogue piece of software belonging to the Pirrit adware family. It operates by running intrusive advertisement campaigns, i.e., delivering various ads. Additionally, adware usually has data tracking abilities, which are used to collect sensitive informat