Aram is part of the VoidCrypt ransomware family. It encrypts files, changes their filenames, and creates the "Decrypt-info.txt" file (ransom note). Aram renames files by appending the dataunlock@criptext.com email address, a string of random characters and the ".Aram" extension. For example, it r
Yifymovies[.]pro is an illegal streaming and video download site. It infringes copyright laws and endangers device/user safety through its use of rogue advertising networks. These networks promote various untrustworthy and even malicious webpages - visiting and using which can lead to a variety of
Encrypt is the name of a malicious program belonging to the VoidCrypt ransomware family. It is designed to encrypt data and demand ransoms for the decryption. In other words, this ransomware renders files inaccessible and asks victims to pay - to restore access to their data. Affected files are r
Wholehugewords[.]com is designed to promote (open) untrustworthy pages and ask for permission to show notifications. There are lots of other pages of this type, for example, naijawide[.]com, news-hoyisa[.]cc, and stream-best-vid[.]com. Users do not open such pages on purpose. Wholehugeword
Nqsq is the name of a ransomware variant that belongs to a family of ransomware called Djvu. It encrypts files, appends the ".nqsq" extension to their filenames, and creates a ransom note (the "_readme.txt" file). For instance, it renames "1.jpg" to "1.jpg.nqsq", "2.jpg" to "2.jpg.nqsq". Scree
Datax is a new variant of the ZEPPELIN ransomware. It encrypts data (renders files inaccessible) and demands ransoms for the decryption. During the encryption process, files are appended with a ".@datax.[victim's_ID]" extension. For example, a file initially named "1.jpg" would appear as somethin
Naijawide[.]com is an illegal streaming and video download website. In addition to infringing copyright laws, this site endangers device and user safety. The website uses rogue advertising networks, which endorse various untrustworthy and even malicious pages. Using such networks is a prevalent m
Yarriedstron[.]xyz uses a clickbait technique to get permission to show notifications from its visitors and opens questionable, potentially malicious pages. It has the same qualities as stream-best-vid[.]com, financesurvey24[.]top, arfanbajt[.]xyz, and plenty of other websites that users open unin
News-hoyisa[.]cc is a rogue webpage that loads dubious content and/or redirects visitors to various (likely unreliable or malicious) sites. The Internet is rife with such websites; financesurvey24.top, emoxan.xyz, and breaking-news.me - are just some examples. Rogue pages are typically accessed v
Spook blocks access to files by encrypting them and appends the ".PUUEQS8AEJ" extension to their filenames. For instance, it renames "1.jpg" to "1.jpg.PUUEQS8AEJ", "2.jpg" to "2.jpg.PUUEQS8AEJ" (another variant of Spook ransomware appends ".NMU7PHR3V5" extension). Also, it generates two ransom not