Discovered by malware analyst Karsten Hahn, Rubly is screenlocker malware. It operates by locking the screen, displaying a full-screen window, and damaging the Master Boot Record (MBR) so that ransom demands can be made. Rubly also claims to have encrypted the data stored on the infected system,
KENS@TUTA.IO was discovered by GrujaRS and belongs to the GlobeImposter ransomware family. These programs are designed to prevent victims from accessing or using their files by encryption. They also change the filenames of all encrypted files and create and/or display ransom messages. KENS@TUTA.I
Coupon Search is a potentially unwanted application (PUA), a browser hijacker that promotes a fake search engine (searchforcoupons-svc.org) by changing certain browser settings to searchforcoupons-serp.org. Commonly, browser hijackers are designed to promote fake search engines and also to track
There are many deceptive websites designed to deceive visitors into using a fake Adobe Flash Player installer, which supposedly updates the currently installed version. Typically, these bogus installers install one or multiple potentially unwanted applications (PUAs) such as browser hijackers an
"2020 Web Research Survey" is a scam promoted on deceptive websites. This scheme claims that people can win a complimentary reward if they complete a short survey. Rather than receiving the promised rewards, however, users are redirected to other scam sites. During research, the scheme redirected
SearchAnything (also known as Search Anything) is an application designed to customize the browser and improve the browsing experience. In fact, it is a browser hijacker that promotes searchanything.co (the address of a fake search engine) by changing hijacked browser settings. Furthermore, it ca
Templates Here Tab is a rogue application categorized as a browser hijacker. It is endorsed as a tool for easy access to various templates. Following successful installation, however, it modifies browser settings to promote hp.htemplateshere.co (a fake search engine). This app can also track brow
ActiveTrack is an application from the AdLoad adware family. It is designed to display advertisements, promote a fake search engine, and might also operate as an information tracking tool. This application is partly adware and partly a browser hijacker. People often download and install apps of
.google (also known as GoGoogle) ransomware is a malicious program designed to encrypt data and demand ransom payments for decryption. This malware has no connection to Google LLC. During the encryption process, all affected files are renamed according to this pattern: original filename, unique ID
ValueKnow is a potentially unwanted application (PUA) classified as adware. Generally, adware-type applications generate revenue for the developers by feeding users with advertisements. This particular app is also capable of accessing and collecting various information. It promotes the Safe Fin