Lockhyp ransomware is part of the MedusaLocker family. It encrypts files and appends ".lockhyp" as their new file extension (for example, it renames a file named "1.jpg" to "1.jpg.lockhyp", "2.jpg" to "2.jpg.lockhyp"). Also, Lockhyp creates the "HOW_TO_RECOVER_DATA.html" file in all folders contai
Ne[.]biz (and this domain's variations, e.g., ne03[.]biz, ne06[.]biz, ne10[.]biz, ne11[.]biz, ne14[.]biz, ne17[.]biz, etc.) is a rogue website. It is designed to load dubious content and/or redirect visitors to other sites (likely untrustworthy and malicious ones). The Internet is rife with such
Highercaptcha-settle[.]com is pretty similar to news-rewuje[.]cc, nomore-spam[.]com, news-joruca[.]cc site, and lots of other untrustworthy websites. Depending on the visitor's geolocation, this page opens two, three other pages of this kind or displays deceptive content (for example, a deceptive
Goodsurvey365[.]org is a page designed to promote other websites (mainly questionable ones) and load fraudulent survey. Its functionality depends on the visitor's IP address. There are many examples of pages like goodsurvey365[.]org, some of them are junesmile[.]xyz, zpreland[.]com, and reverscapt
"Novo Banco email scam" is the name of a spam campaign - a large-scale operation during which deceptive emails are sent by the thousand. These letters are disguised notifications from Novo Banco - a legitimate Portuguese bank. The fake emails request recipients to reactivate and reregister their
Extended Clipper is a piece of malicious software designed to replace clipboard (copy/paste buffer) data. Typically, clipper-type malware is used to replace digital wallet addresses with those belonging to cyber criminals - in order to divert digital currency transactions. However, Extended Clipp
There is a great number of websites like asoursuls[.]com on the Internet. Some examples are junesmile[.]xyz, notify[.]tk, and videoplayernow[.]com. Asoursuls[.]com checks the IP address and then loads its content or opens a couple of other websites. It is common for pages like asoursuls[.]com to b
Wwka encrypts files and appends its extension (".wwka") to their filenames. For instance, it renames "1.jpg" to "1.jpg.wwka", "2.jpg" to "2.jpg.wwka", and so forth. Like most ransomware variants, Wwka generates a ransom note too. It creates a text file named "readme.txt". This ransomware is part o
Junesmile[.]xyz is a rogue webpage, sharing many common traits with vigilated.space, notify.tk, zpreland.com, and thousands of others. This site operates by presenting visitors with dubious content and/or redirecting them to various websites (likely untrustworthy or malicious ones). Users rarely
Most browser hijackers are designed to promote fake search engines. Usually, they promote their addresses by changing web browser settings. SportSearchStream is designed to encourage users to search the web using sportsearchstream.com. If this app is installed on a browser, then it should be remov