middleman2020 is yet another ransomware-type infection discovered by Michael Gillespie. Once infiltrated, middleman2020 encrypts most stored data, thereby rendering it unusable. Additionally, middleman2020 appends filenames with the ".middleman2020" extension (hence its name). For example, "sampl
Find My Ancestry is a browser-hijacking application that claims to help people find their ancestors. Judging on appearance alone, Find My Ancestry may seem legitimate and useful, however, this app usually infiltrates systems without permission. Furthermore, Find My Ancestry promotes a fake search
"Maritime Email Virus" is a spam campaign that cyber criminals use to trick people into installing the HawkEye keystroke logger. They send emails that are disguised as messages from OSM Maritime Group and hope that recipients open the attached file. If opened, this file infects computers with the
Similar to markably.info, armuchteetthat.info, torlock.com and many others, joviatranson[.]info is a rogue website that redirects to other dubious websites and displays dubious content. Users generally visit websites such as joviatranson[.]info inadvertently - they are redirected by potentially un
The Quick Mac Care app supposedly keeps Mac computers clean and secure. It is presented as a system maintenance and security tool that scans and boosts operating systems by removing junk files, residual files, and other unwanted entries. Quick Mac Care may seem to be a useful and legitimate too
Fast Login Email Now is yet another deceptive application that supposedly allows users to access their emails. On initial inspection, this app may seem legitimate and useful, however, it is categorized as a potentially unwanted application (PUA) and a browser hijacker. Fast Login Email Now often
bodlift[.]com is a rogue website designed to feed visitors with dubious content and redirect them to other dubious sites. It is virtually identical to ughitilagu.info, armuchteetthat.info, evengsitolightont.info, and hundreds of other rogue sites. Research shows that many visitors arrive at bodli
Discovered by Michael Gillespie, Horon is a ransomware-type program belonging to the Djvu ransomware family. Ransomware is software that cyber criminals use to extort money from victims. These programs encrypt files. To decrypt them, victims are encouraged to pay a ransom (purchase a decryption to
Similar to markably.info, tinhowsinutha.pro, ughitilagu.info, and many others, withingadvertly[.]pro is a rogue website designed to feed users with dubious content and redirect them to other dubious sites. Users typically arrive at withingadvertly[.]pro inadvertently - they are redirected by pote
Orion is the name of malicious software classified as ransomware. Like most programs of this type, Orion blocks access to files stored on the system by encryption until a ransom is paid. It also renames all encrypted files by adding the ".orion" extension plus a random string of numbers and an ema