"Salesforce" is the name of a spam email campaign designed to proliferate the Gozi Trojan. The term "spam campaign" refers to a large-scale operation, during which deceptive emails are sent by the thousand. The scam messages of this spam campaign are disguised as order confirmation notifications f
Discovered by Jakub Kroustek, .data is a malicious program that is part of the Dharma ransomware family. It is designed to encrypt data and demand payment for decryption. During the encryption process, all files are renamed following this pattern: original filename, unique ID, cyber criminals' em
FunctionRecord is dubious software classified as adware and also with characteristics typical of browser hijackers. Following successful installation, it runs intrusive ad campaigns, modifies browser settings and promotes fake search engines. FunctionRecord promotes Safe Finder through akamaihd.
Smpl is a malicious program, which is part of the Dharma ransomware group. It is designed to encrypt data and demand payment for decryption. During the encryption process, all compromised files are renamed following this pattern: original filename, unique ID, cyber criminals' email address and the
Free Package Tracker Plus is rogue software endorsed as a tool for easy access to package tracking services. In fact, it delivers intrusive ad campaigns and is therefore categorized as adware. Additionally, Free Package Tracker Plus monitors users' browsing activity. Due to the dubious techniques
Free File Converter Pro is rogue software classified as adware. It is endorsed as a tool capable of and quickly converting and editing various files. Free File Converter Pro can supposedly convert/edit more than one hundred file formats. In fact, this adware operates by running intrusive advertis
Discovered by dnwls0719, XINOF is a new variant of Fonix ransomware. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. When this ransomware encrypts, all affected files are renamed according to this pattern: original filename, cyber crim
Repl is malicious software belonging to the Djvu ransomware family. It is designed to encrypt data and demand payment for decryption tools/software. During the encryption process, the filenames of affected files are appended with the ".repl" extension. For example, a file originally named somethin
paluns[.]xyz is a deceptive website designed to promote various scams. At the time of research, this site ran desktop and mobile version scams. One of the schemes warned users of viruses (actually nonexistent) on their devices, which is something no web page can detect. Others claimed that a V
EssentialCommand is an adware-type application that also has browser hijacker traits. Following successful infiltration, it delivers intrusive advertisement campaigns, makes modifications to browser settings and promotes fake search engines. Most adware and browser hijackers gather browsing-rel