BANG is a malicious program belonging to the Dharma ransomware family. The discovery of this malware is credited to Jakub Kroustek. Following successful infiltration, BANG ransomware encrypts files in order to demand payment for decryption. During the encryption process, all affected files are re
DarkTrack is a malicious program classified as a Remote Access Trojan (RAT). This type of malware enables remote access and control over an infected device. The level of control these programs have varies, however, some can allow user-level manipulation of the affected machine. The functionalitie
SearchModule is an adware-type application with browser hijacker characteristics. Following successful infiltration, this app delivers various unwanted and dangerous advertisements, modifies browsers and promotes a fake search engine. Additionally, most adware and browser hijackers can record br
The application-update[.]com website loads various scams. Research shows that the displayed scams target mainly mobile users. At the time of research, all scams served by application-update[.]com were designed to trick people into installing various potentially unwanted applications (PUAs). Not
Maps N' Direction Hub is a rogue application endorsed as a tool for easy access to various maps and routes. It is classified as a browser hijacker due to the modifications it makes to browsers to promote hmapndirectionhub.com (a bogus search engine). Maps N' Direction Hub also monitors users' brow
Phishing emails such as this are often sent by cyber criminals who attempt to deceive unsuspecting recipients into providing private, sensitive information. In this particular case, they send emails claiming that the recipients' Google Ads accounts have been suspended and urge them to restore the
Manuals Directory Search is a potentially unwanted application (PUA), a browser hijacker that promotes the search.manualsdirectory-api.org fake search engine by modifying browser settings. It is categorized as a PUA, since people often download and install this type of browser hijacker inadverten
This is one of many phishing emails disguised as legitimate messages and distributed to trick unsuspecting recipients into providing the requested information: ShareFile login credentials (email address and password). Cyber criminals behind this email attempt to steal ShareFile accounts and might
"COVID-19 test" is yet another Coronavirus/COVID-19-themed spam email campaign. There are several variants of these deceptive emails, however, the common thread is that they all offer free coronavirus testing to recipients. The messages claim that the attached files are forms/applications, howeve
Solider was discovered by Amigo-A. This ransomware encrypts files, renames them by appending an extension, and generates ransom messages. Solider appends the ".xsmb" extension to a name of each encrypted file. For example, it renames a file named "1.jpg" to "1.jpg.xsmb", "2.jpg" to "2.jpg.xsmb", a