Discovered by MalwareHunterTeam, PAY IT OR LOST IT is the name of ransomware - software that prevents victims from accessing their files by encoding them with an encryption algorithm. In this case, the 'ransomware' does not encrypt any files, any yet the developers demand to be paid anyway. PAY
untotlowith[.]info is a rogue website, sharing many similarities with noorotin.biz, fres-news.com, donaldredpage.icu, and countless others. It operates by presenting users with dubious content and causing redirects to other untrustworthy/malicious sites. Few users access untotlowith[.]info intent
Discovered by Alex Svirid, Sill@tuta.io is malicious software belonging to the GlobeImposter ransomware family. This program operates by encrypting data and demanding a ransom for decryption. I.e., decryption software/tools must be purchased to recover the encrypted data. As encryption is in prog
Bora is malicious software designed to encrypt files and create a ransom message ("_readme.txt") that contains information about how to decrypt data. Software of this type is called ransomware. This particular ransomware infection was discovered by Michael Gillespie and is part of Djvu, a family o
Developers present search.kiboletshual.com as an Internet search engine that supposedly enhances the Internet browsing experience by generating better search results. These claims often trick users into believing that this website is legitimate and useful, however, search.kiboletshual.com conti
ProductEvent supposedly helps users to obtain accurate search results and enhances the browsing experience in other ways. In fact, this app is categorized as adware, a potentially unwanted application (PUA). Most adware-type apps serve advertisements, however, they sometimes gather various user
Get Directions Now is a rogue application advertised for easy access to various maps and driving route content. It is supposedly capable of providing maps, driving directions, local traffic news, etc. In fact, it is categorized as a browser hijacker, since it makes unauthorized changes to browser
CASH is malicious software belonging to the Crysis/Dharma malware family. Discovered by Jakub Kroustek, this program is classified as ransomware. It operates by encrypting data and denying access until a ransom is paid. As CASH encrypts files, it renames them with the victim's unique ID number, de
Discovered by MalwareHunterTeam, Sapphire ransomware encrypts data and displays a pop-up window containing a ransom message with decryption instructions. It renames encrypted files by adding the ".sapphire" extension to filenames. For example, "1.jpg" becomes "1.jpg.sapphire". To decrypt their fil
0fficial[.]info is a scam website used to endorse the Cleanup My Mac application (however, it is actually presented as "MacCleaner"). This site uses scare-tactics to encourage users into installing its promoted Potentially Unwanted Application (PUA). The 0fficial[.]info web page warns visitors