Discovered by dnwls0719, Credo belongs to the Dharma ransomware family. Credo is typical ransomware: it encrypts files, renames them and generates a ransom message. It renames encrypted files by adding the victim's ID, Recovery@qbmail.biz email address and appending the ".credo" extension to filen
OdysseusLookup is a rogue application classified as adware and possessing browser hijacker traits. Following successful installation, OdysseusLookup delivers intrusive ad campaigns, makes alterations to browser settings and promotes fake search engines. Most adware type apps and browser hijacke
The SearchRange app is often installed unintentionally through a deceptive Adobe Flash Player installer. Therefore, this app is categorized as a potentially unwanted application (PUA). After installation, it hijacks browsers, changes certain browser settings, and starts to display various ads.
BasicDesktop is a rogue application categorized as adware. Additionally, this app also has browser hijacker traits. BasicDesktop operates by delivering intrusive advertisement campaigns, modifying browser settings and promoting fake search engines (Safe Finder via akamaihd.net). Due to the dubi
HideMeFast is rogue software, which operates as a browser hijacker. Typically, software within this classification operates by making certain modifications to browsers to promote fake search engines, however, HideMeFast behaves in a different manner. It promotes a legitimate search engine called B
Inprobable Tab is rogue software categorized as a browser hijacker. Following successful infiltration, it modifies browser settings to promote inprobabletab.com (a fake search engine). Additionally, most browser hijackers monitor users' browsing activity and it is likely that Inprobable Tab does s
Cyber criminals attempt to trick users into installing malware on their computers in various ways. In most cases, they disguise a malicious file or program as legitimate and hope that users open/launch it. In this particular case, cyber criminals claim that there is a tool available, which is capa
Sharing many similarities with routemob.com, rministencew.club, news-back.best and thousands of others, zmusic-online[.]com is a rogue website that redirects visitors to other untrusted/malicious sites and/or contains dubious content. Most users access zmusic-online[.]com (and similar pages) when
routemob[.]com opens dubious websites or loads unwanted content. There are are many websites similar to routemob[.]com on the internet. Some examples are rministencew[.]club, news-back[.]best and sombes[.]com. Note that users do not often visit these sites intentionally - they are opened by instal
"SD BIOSENSOR" is yet another Coronavirus/COVID-19-themed spam campaign. The term "spam campaign" is used to define a large scale operation, during which thousands of deceptive/scam emails are sent. The messages are disguised as mail from a legitimate global bio-diagnostic company (SD BIOSENSOR).