Discovered by Jakub Kroustek, Korea is a ransomware-type program and part of the Dharma ransomware family. Like most computer infections of this type, cyber criminals use Korea to encrypt files stored on the computer and make ransom demands. Therefore, people with computers infected with this rans
search.hhighdefinitionradioplayer.com is a fake search engine that is presented as useful and legitimate. Developers promote it using a potentially unwanted application (PUA) called High Definition Radio Player, which is categorized as browser hijacker. According to the developers, this app provi
JCry is high-risk ransomware that stealthily infiltrates computers and encrypts stored data. Research shows that developers tried to proliferate JCry by exploiting a certain web plug-in implemented on various Israeli websites. Due to faulty source code, however, they failed. JCry encrypts data an
search.hyourfreeonlineformsnow.com is yet another fake search engine that, according to the developers, enhances the browsing experience by delivering the most accurate results and providing quick access to various popular websites. Judging on appearance alone, search.hyourfreeonlineformsnow.com
"DSKD Email Virus" is a spam email campaign that cannot be trusted. Scammers send it to many people hoping that a percentage of them will open the attachment, which is presented as an "urgent inquiry". If opened, it causes download and installation of a high-risk computer infection called FormBook
Auto Mac Speedup is another deceptive application that supposedly allows users to enhance computer performance by cleaning caches, unwanted files, rogue applications, and providing other similar features. On initial appearance, Auto Mac Speedup may seem legitimate and useful, however, developer
hadmatontrin.com is another rogue website that is virtually identical to pugu5l.com, getmacsoft.com, chillcardiac.com, and many others. This website redirects users to other websites and delivers dubious content. Research shows that users typically end up visiting this site inadvertently, since
Promok is another variant of a high-risk ransomware infection called Djvu. As with other infections from this malware family, Promok stealthily infiltrates computers and encrypts most stored files, rendering them useless. Furthermore, Promok adds the ".promok" extension to the name of each encrypt
pushtouchme.info is one of many rogue websites on the internet and very similar to becausaldevel.info, onlinepushnotification.com, and parliery.info. Its main purpose is to redirect visitors to dubious, deceptive websites or display dubious content. Most users visit this site unintentionally - th
search.hpackage-manager.net is categorized as a fake search engine. Although it is promoted as legitimate, developers promote it using a browser hijacker, a PUA (potentially unwanted app) called Package Manager. According to the developers, this PUA supposedly allows users to track their packages