TEREN belongs to the family of ransomware called Dharma. This malware encrypts files and changes their filenames, displays a ransom message in a pop-up window and creates the "FILES ENCRYPTED.txt" text file (another ransom message). It renames files by adding the victim's ID, databack44@tuta.io e
wapwon-k[.]uno is a rogue site sharing many similarities with allwownewz.com, urgent-incoming.email, withoughzp.club and thousands of others. Visitors to this website are presented with dubious content and/or are redirected to other untrusted/malicious pages. Few users access wapwon-k[.]uno or si
This ransomware is part of the Xorist ransomware family. Wannacry666 is also malware designed to encrypt victims' files, modify the filenames of compromised files, and create a ransom message. It renames files by appending the ".wannacry666" extension. For example, a file called "1.jpg" would be
ConnectionFormat is an adware-type application that possesses browser hijacker characteristics. It runs intrusive advertisement campaigns, make modifications to browser settings and promotes fake search engines. On Safari browsers, ConnectionFormat promotes 0yrvtrh.com and search.adjustablesampl
Jeefo is malware that infects Windows executable files (.exe extension) by injecting them with malicious code. It is possible that cyber criminals behind this malware use Jeefo to collect sensitive information (usernames, passwords, credit card details) or for other malicious purposes. Therefore,
"ERROR # 0x6a4-0xf9fx3999" is a technical support scam run on various deceptive websites. This scheme has been observed being promoted via the Microsoft Azure website-hosting platform. At the time of research, there were two variants of the "ERROR # 0x6a4-0xf9fx3999" scam, which are practically id
Iossecure[.]com is a scam website designed to promote VPN PROtrack (Complete protect), and likely, other similar apps. The associated website promotes the app in a deceptive way: it claims that the operating system is infected with viruses and/or the visitor's online activity could be monitored
Jolly Web is a browser hijacker designed to promote quicknewtab.com, the address of a fake search engine. Generally, apps of this type promote search engines by changing certain browser settings. Browser hijackers often collect browsing-related information. Generally, users download and install a
TAKA is malicious software belonging to the Xorist ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption tools. During the encryption process, all compromised files are appended with the ".TAKA" extension. For example, a f
Generally, websites such as you-just-won-prize[.]com promote (open) bogus web pages or load dubious content. More examples of pages similar to you-just-won-prize[.]com are urgent-incoming[.]email, withoughzp[.]club and xrclicks[.]xyz. Note that people do not often visit these sites intentionally