Make changes is the name of a browser hijacker promoting the fxsmash.xyz fake search engine. It is endorsed as a tool for improving website legibility by changing text and background colors. This piece of rogue software operates by modifying browser settings - to promote its web searcher. Additio
As a rule, cybercriminals (scammers) behind phishing emails impersonate legitimate companies, organizations or other entities with the purpose to trick unsuspecting people into providing sensitive information. Most of them target credit card details, and login credentials (e.g., usernames, emai
Security-info[.]space is a deceptive website running various scams. At the time of research, this page promoted a scheme targeting iPhone users (however, it may be accessed via other Apple devices as well). This scam claims that malware has been detected on visitors' mobile phones - by "Apple Se
Landingsecure[.]com is a deceptive website used to scare its visitors into downloading and installing a certain potentially unwanted application (PUA). Usually, websites like landingsecure[.]com display fake virus or error notifications, messages encouraging visitors to solve the problem (remov
IncognitoSearchly is a piece of rogue software categorized as a browser hijacker. It operates by promoting the incognitosearchly.com fake search engine by making changes to browser settings. Additionally, most browser hijackers spy on users' browsing activity; hence, it is highly likely that Inco
"Socar email virus" refers to a malware-spreading spam campaign - a large-scale operation during which thousands of deceptive emails are sent. The letters distributed through this campaign - are disguised as mail from SOCAR (State Oil Company of Azerbaijan Republic) - national oil and gas company
Ransomware is a form of malicious software that encrypts files (makes them inaccessible, unusable for victims) and displays, creates a ransom note. It is common that malware of this type modifies filenames. Uniwinnicrypt encrypts files and appends the ".uniwinnicrypt" as their file extension, for
Discovered by dnwls0719, Jormungand is a ransomware-type program. This malware operates by encrypting data and demanding payment for the decryption. In other words, the files affected by Jormungand are rendered inaccessible, and victims are asked to pay - to recover access to their data. During t
Most browser hijackers are designed to promote one or another fake search engine (its address) by making certain changes in a web browser's settings. SearchConverterApp is designed to promote the searchconverterapp.com address. It is noteworthy that browser hijackers tend to be designed to collec
Ransomware is a type of malicious software that cybercriminals monetize by leaving victims with no other option but to purchase a decryption tool from them. Malware of this type encrypts files and keeps them inaccessible unless they are decrypted with the right tool (program, key). RunExeMemory n