Discovered by Jakub Kroustek, Dec is a part of the Dharma ransomware family. This malicious program encrypts files, modifies their filenames and provides victims with instructions about how to contact the developers in a pop-up window and text file (these are ransom messages). Dec renames encrypt
Jquerysxur is a group of deceptive websites promoting various online schemes. Sites belonging to this group have been observed promoting variants of the "You've Made The 5-billionth Search" and "Latest version of Adobe Flash Player" scams. It is also possible that other schemes can be accessed t
NationalSpecial is an adware-type application. As well as running intrusive ad campaigns, it also possess certain characteristics common to browser hijackers, such as browser modification and fake search engine promotion. This app promotes Safe Finder through akamaihd.net. Furthermore, most adw
apple-warning[.]com is one of many sites claiming that visitors' devices are infected with viruses and encouraging them to download and install a potentially unwanted application (PUA) to supposedly remove detected threats. Typically, people do not visit addresses such as apple-warning[.]com in
The main purpose of CommonAdmin is to feed users with advertisements and promote the Safe Finder web page via akamaihd.net. This application is also likely to operate as an information tracking tool. Few users download or install adware intentionally and, therefore, these programs are categorize
Guildma is malicious software exclusively targeting Brazil and classified as a banking Trojan. While some variants of this malware have been updated to widen its range to other territories, no observations have been made of such attacks being carried out. Furthermore, later versions had these cap
QuestSearch is an adware-type application which is distributed through a fake Adobe Flash Player installer. When installed, it serves a variety of advertisements. Additionally, it functions as a browser hijacker - QuestSearch promotes a fake search engine by changing browser settings. Note that
Lalo is malicious software belonging to the Djvu ransomware family. Systems infected with this malware suffer data encryption and users receive ransom demands for decryption. During the encryption process, all affected files are appended with the ".lalo" extension. For example, a file like "1.jpg
Best Media Converter supposedly functions as an audio, video and document converter, however, as with all other adware software, this program simply delivers advertisements. Since users often download and install adware inadvertently, these programs are categorized as potentially unwanted applicat
Discovered by Jirehlov, SARS-CoV-2 is malicious software categorized as ransomware. This malware is designed to encrypt data and demand payment for decryption. When it encrypts, all affected files are appended with the ".SARS-CoV-2" extension. For example, a file originally named something like "