Discovered by Alex Svirid, Sill@tuta.io is malicious software belonging to the GlobeImposter ransomware family. This program operates by encrypting data and demanding a ransom for decryption. I.e., decryption software/tools must be purchased to recover the encrypted data. As encryption is in prog
Bora is malicious software designed to encrypt files and create a ransom message ("_readme.txt") that contains information about how to decrypt data. Software of this type is called ransomware. This particular ransomware infection was discovered by Michael Gillespie and is part of Djvu, a family o
Developers present search.kiboletshual.com as an Internet search engine that supposedly enhances the Internet browsing experience by generating better search results. These claims often trick users into believing that this website is legitimate and useful, however, search.kiboletshual.com conti
ProductEvent supposedly helps users to obtain accurate search results and enhances the browsing experience in other ways. In fact, this app is categorized as adware, a potentially unwanted application (PUA). Most adware-type apps serve advertisements, however, they sometimes gather various user
Get Directions Now is a rogue application advertised for easy access to various maps and driving route content. It is supposedly capable of providing maps, driving directions, local traffic news, etc. In fact, it is categorized as a browser hijacker, since it makes unauthorized changes to browser
CASH is malicious software belonging to the Crysis/Dharma malware family. Discovered by Jakub Kroustek, this program is classified as ransomware. It operates by encrypting data and denying access until a ransom is paid. As CASH encrypts files, it renames them with the victim's unique ID number, de
Discovered by MalwareHunterTeam, Sapphire ransomware encrypts data and displays a pop-up window containing a ransom message with decryption instructions. It renames encrypted files by adding the ".sapphire" extension to filenames. For example, "1.jpg" becomes "1.jpg.sapphire". To decrypt their fil
0fficial[.]info is a scam website used to endorse the Cleanup My Mac application (however, it is actually presented as "MacCleaner"). This site uses scare-tactics to encourage users into installing its promoted Potentially Unwanted Application (PUA). The 0fficial[.]info web page warns visitors
ManagerPages is an application that supposedly makes everyday browsing easier, however, rather than operating as a useful tool, it feeds users with unwanted ads. This software is classified as adware and a potentially unwanted application (PUA). Most people download and install apps of this typ
Discovered by MalwareHunterTeam, Bguu is malicious software based on an open-source ransomware project called Hidden Tear. It is designed to encrypt files and keep them locked until a ransom is paid (decryption software/tool is purchased). As the encryption is in progress, this program renames fil