Viper is a malicious program classified as ransomware. It is based on the Hidden Tear (HiddenTear) open-source project. Systems infected with Viper ransomware experience data encryption and users receive ransom demands for decryption. During the encryption process, all affected files are renamed
This application has nothing to do with the official, legitimate Google Docs extension. It is classified as adware and designed to promote various dubious websites. The initial redirects caused by this adware typically start with the "blob:https://p6vh.com" website which, in turn, redirects elsewh
oceanbefo[.]top is a rogue website sharing many similarities with newscatch24.com, rex-news.org, samizdat-philosophy.com and thousands of others. Once accessed, this site presents visitors with dubious content and/or redirects them to other untrusted or possibly malicious web pages. Few users acc
Sharing many similarities with hesterinoc.info, cicort.com, overiesarticu.info and countless others, rdsb2[.]club is a rogue website. It presents visitors with dubious content and/or redirects them to other untrusted, deceptive or malicious pages. Typically, users access rdsb2[.]club and similar
Typically, users do not open pages such as redneckrepairs[.]com intentionally - they are opened automatically by browsers with potentially unwanted applications (PUAs) installed on them. Apps of this type are designed to promote sites such as redneckrepairs[.]com, serve advertisements, and collect
MagicMovieSearch is rogue software categorized as a browser hijacker. It operates by making changes to browser settings to promote magicmoviesearch.com (a fake search engine). Additionally, most browser hijackers have data tracking capabilities, which are employed to monitor users' browsing activi
ahacdn[.]me is virtually identical to many other pages of this kind including, for example, rex-news[.]org, samizdat-philosophy[.]com and revoluciondron[.]com. Generally, users do not visit these pages willingly - they are opened by browsers that have potentially unwanted applications (PUAs) insta
LearningActivity is an adware-type application with browser hijacker traits. Following successful installation, it delivers intrusive ad campaigns and makes modifications to browser settings to promote bogus search engines. Additionally, most adware-type apps and browser hijackers collect browsi
LCK is a malicious program belonging to the Dharma ransomware family. This particular program encrypts files, renames them, displays a pop-up window, and creates the "FILES ENCRYPTED.txt" text file. LCK renames files by adding the victim's ID, triplock@tutanota.com email address and ".LCK" extensi
Slfyvggi is malicious software belonging to the Snatch ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption. During the encryption process, all affected files are appended with the ".slfyvggi" extension. For example, a fil