guesstimateds[.]com is a rogue website running various scams. The researched variant claims that, by completing a short survey, users can win a prize. These schemes are typically designed for phishing purposes. I.e., by offering fake prizes, they attempt to extort personal information and/or other
MajorPanelSearch is designed to display advertisements and promote the address of a fake search engine by changing browser settings. This app has traits of adware and browser hijackers. It might also be designed to collect data relating to users' browsing habits. In most cases, people download
searchred01.xyz is promoted through a potentially unwanted application (PUA), a browser hijacker called Suxs APP. This address might also be promoted by other apps of this type. Typically, browser hijackers promote fake search engines by changing certain browser settings. Most gather browsing-rel
Space is a part of the Dharma ransomware family. It encrypts files, renames them, displays a ransom message in a pop-up window, and creates another in a text file named "FILES ENCRYPTED.txt". Space renames files by adding the victim's ID, the Mail@qbmail.biz email address, and appending the ".spac
!Shadow is malicious software categorized as ransomware. It operates by encrypting the data of infected systems and presenting victims with ransom demands for decryption tools. During the encryption process, all affected files are renamed according to this pattern: "{ShadowofDeath@elude.in}.ID=[v
The main purpose of AdditionalChannelSearch is to serve advertisements, however, it also promotes the address of a fake search engine by modifying browser settings. In summary, AdditionalChannelSearch has characteristics of adware and browser hijackers. Users often download and install apps of
Mint Search is designed to promote find.mintsearch.net (the address of a fake search engine). This app also adds the "Managed by your organization" feature to Google Chrome browsers. Since Mint Search is classified as a browser hijacker, it might also be designed to collect browsing data. Commonl
Discovered by Michael Gillespie, Hex911 is a malicious program classified as ransomware. It is designed to encrypt the data of infected systems and demand payment for decryption. During the encryption process, filenames of affected files are appended with an extension. One variant adds ".hex911 an
sabs-news[.]info is virtually identical to pushcleansystem[.]com, checkvd[.]com, enerativearea[.]pro and many other rogue sites designed to display dubious content or open other rogue web pages. Typically, users do not visit these sites intentionally - they are opened through deceptive ads, untrus
Nlah is a malicious program belonging the to Djvu ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, filenames of affected files are appended with the ".nlah" extension. For