SUMMON encrypts victim's files, renames them, and displays a ransom message ("#ReadThis.HTA"). It renames each encrypted file by prepending the summonunlock@gmail.com email address, victim's ID, and appending the ".SUMMON" extension to the filename. For example, "1.jpg" is renamed to "[SummonunLo
The PDFConverterSearchHD browser hijacker changes certain browser settings to promote a fake search engine (pdfconvertersearchhd.com). It can also read information relating to users' browsing activities. Browser hijackers are often downloaded and installed by users unintentionally and, therefore,
StreamSiteSearch is a browser hijacker. It operates by making modifications to browsers to promote streamssitesearch.com (a bogus search engine). Additionally, StreamSiteSearch monitors users' browsing activity. Due to the dubious methods used to proliferate this browser hijacker, it is also clas
Discovered by xiaopao, Judge is a ransomware-type malicious program. Systems infected with this malware, experience data encryption and users receive ransom demands for decryption. During the encryption process, files are renamed following this pattern: original filename, cyber criminals' email a
support-service[.]space is a deceptive website designed to trick visitors into believing that their devices are infected and into downloading potentially unwanted applications (PUAs), which will supposedly remove viruses. Typically, these scam websites are opened when people visit other untruste
ViperSoftX is a JavaScript-based Remote Access Trojan (RAT). Malware of this type allows stealthy remote access and control over an infected machine. These Trojans can have a wide variety of dangerous functionality, which enables likewise varied misuse of the compromised device. The primary purpo
check-me[.]online is an untrusted website designed to present visitors' with dubious content and/or redirect them to other bogus and malicious pages. There are thousands of these rogue sites on the web - suggestive.com, purplemedia.biz, and luckhours.com are just some examples. Visitors rarely en
OperativeDock is a rogue application categorized as adware. Additionally, this app has browser hijacker characteristics. Therefore, following successful infiltration, OperativeDock delivers intrusive advertisement campaigns and makes modifications to browser settings to promote bogus search engi
"Your system is heavily damaged by Two viruses!" is a scam run on deceptive websites (e.g. todaystrends[.]co, greacore[.]com, contentfilled[.]com, nbvtread[.]com and topoffert[.]com). There are multiple variants of this scam. The text presented in them is practically identical, however, the vers
New Finder is a browser hijacker that promotes tailsearch.com, the address of a fake search engine and collects browsing history. It might also record other browsing-related data. In most cases, users download and install apps such as New Finder (browser hijackers) inadvertently and, for this reas