Discovered by Raby, MarioLocker is a malicious program classified as ransomware. Typically, people with computers infected with software of this type cannot access/use their files. Ransomware encrypts data so that victims are unable to decrypt it without specific tools that can only be purchased f
Express Package Finder Tab is a browser hijacker, which is endorsed as a tool for easy access to package tracking services. It operates by changing browser settings to promote a fake search engine (hp.hexpresspackagefinder.com). Additionally, it monitors users' browsing activity and gathers their
As its name suggests, the Watch Television Online app is designed to provide quick access to various popular TV shows. In fact, it is classed as a browser hijacker, since it changes browser settings to promote a fake search engine (in this case, search.watchtelevisiononlinetab.com) and a potential
topoffert[.]com is a deceptive website, which operates by claiming that the visitor's device is infected and recommending an application for removal of the 'detected' threats. It endorses Solid VPN, MyProtect VPN, and other, similarly dubious apps. Note that no site can find issues/threats prese
The ewaglongoo[.]com website leads visitors to a variety of other untrustworthy sites including, for example, notification-list[.]com. Typically, the opened web pages contain dubious content or open further rogue pages. In any case, neither ewaglongoo[.]com, nor sites opened through it, can be tru
"The last time you visited a Porn website" is a 'sextortion' scam that scammers employ to send emails to extort money from unsuspecting users. They threaten to proliferate a 'humiliating video' of the email recipient, unless their demands to pay a ransom are met immediately. The best way to react
Calum is malicious software belonging to the Phobos ransomware family. Malware under this classification is designed to encrypt data and demand ransom payments for decryption. During encryption, all affected files are appended with the victim's unique ID, developer's email address, and the ".Calum
videostream[.]best is one of many rogue websites designed to redirect visitors to other web pages of this kind, or to load dubious content. Some other examples include loading-wsite[.]com, private-show[.]live, and sonagerthrou[.]com. Generally, browsers open these sites when potentially unwanted
Mispadu (also known as URSA) is the name of a banking Trojan. Cyber criminals behind this software target people living in Brazil, Spain and Mexico. They seek to steal credentials, credit card and banking data. Research shows that this malware is distributed through spam campaigns and malicious a
loading-wsite[.]com is a rogue site sharing similarities with private-show.live, bestflowingstuff.co, 1backlinks.com, and many others. It presents visitors with dubious content and generate redirects to other, untrustworthy and malicious web pages. Few visitors to these websites enter them willin