Vakogid[.]com is a rogue site, sharing many similarities with checking-your-browser.com, central-messages.com, pushmobilenews.com and many others. It operates by causing unwanted redirects to compromised and potentially malicious sites, as well as delivering untrustworthy and even malignant conten
laubeyrietechnology[.]com is a dubious web address associated with Ads X. Research shows that people who click ads displayed by Ads X while searching with Google are forced to visit laubeyrietechnology[.]com and are then redirected to the advertiser's website. I.e., users reach the web page of an
PDFPros is yet another deceptive application that claims to allow conversion of various documents to PDF format. Its appearance suggests that PDFPros is a legitimate program, however, it is categorized as a potentially unwanted application (PUA) and a browser hijacker. There are three main reason
The behaviour and appearance of Getappsonline browser hijackers is virtually identical. Deceptive marketers offer "unique value" (for example, free online movies) and use this to trick people into installing unwanted browser extensions. Once installed, these apps start to track users' internet br
Developer promote Transit Schedules as an app that can be used to search for free public transit routes. Additionally, it includes a web search tool. In fact, this app is a browser hijacker. Transit Schedules changes browser settings to promote a fake search engine (search.htransitschedules.com)
Belonging to the Djvu ransomware family, Pedro is a high-risk infection discovered by Michael Gillespie. Following successful infiltration, Pedro encrypts most stored data (thereby rendering it unusable) and appends each filename with the ".pedro" extension (hence its name). For example, "sample.
Dragon is a new variant of Aurora ransomware. This version was discovered by Jack. Dragon locks files with the RSA-2048 encryption algorithm and creates a ransom message within the "#DECRYPT_MY_FILES#.txt" file. It renames all encrypted files by adding the ".locked" extension to filenames. For exa
Kryptik (also known as Win32/Kryptik.BGIS) is a backdoor trojan, which is often installed without users' knowledge. Therefore, people do not install programs of this type intentionally. When installed, Kryptik can be controlled remotely. Using this feature, cyber criminals attempt to trick people
Smoke Loader is trojan-type malware used to proliferate various other viruses. Cyber criminals proliferate Smoke Loader using spam emails (malicious attachments). Therefore, it typically infiltrates systems without users' consent. After successful infiltration, the malware performs a number of ac
Tofsee (also known as Gheg) is a malicious Trojan-type program that is capable of performing DDoS attacks, mining cryptocurrency, sending emails, stealing various account credentials, updating itself, and more. Cyber criminals mainly use this program as an email-oriented tool (they target users'