"Arrival Notice Email Virus" is another spam email campaign that proliferates high-risk malware called Remcos. Developers send thousands of emails stating that a DHL shipment has been delivered and encourages users to open an attachment for more information. Once opened, the malicious attachment s
Discovered by MalwareHunterTeam, RansomWarrior is ransomware-type virus that stealthily infiltrates the computer and encrypts most stored files, thereby making them unusable. In addition, RansomWarrior renames files using the "[random_word].THBEC" pattern (e.g., "sample.jpg" might be renamed to a
search.buildupstage.com is another fake search engine identical to search.cocoshamen.com, search.pardessov.com, and many others. This website claims to enhance the browsing experience by generating improved search results. Furthermore, its appearance barely differs from Google, Yahoo, Bing, and
ZOLDON is a ransomware-type virus discovered by MalwareHunterTeam. Immediately after infiltration, ZOLDON encrypts most stored files, thereby making them unusable. Unlike other ransomware-type viruses, however, ZOLDON does not append file extensions or rename files. Once data is encrypted, the vir
"Apologies For Interruption!" is a fake error message similar to Phishing/Spyware Were Found On Your Mac, Critical System Error: x679Qs5m, and many others. This pop-up is delivered by various rogue websites. Most users visit these sites inadvertently - they are redirected by intrusive advertise
ShutDownTime is a rogue application that supposedly allows users to set a time for the computer to shut down. Initially, ShutDownTime may seem legitimate, however, it is categorized as a potentially unwanted program (PUP) and adware. There are three main reasons for these negative associations: 1
ProxyGate is an application that falsely claims to enhance the web browsing experience by providing access to a number of proxy servers. These fake promises often trick users into believing that ProxyGate is a legitimate application, however, it is categorized as adware and a potentially unwanted
Sality is an old family of various malware. Although it originates from 2003, it is relevant today, since developers continually update these viruses and add new features. They are proliferated in various ways, but mostly by cyber criminals employing spam email campaigns. They send thousands of d
KEYPASS is a high-risk ransomware-type virus that stealthily infiltrates the system and encrypts most stored data. We suspect this malware to be an updated variant of another ransomware infection called STOP. During encryption, KEYPASS appends filenames with the ".KEYPASS" extension (e.g., "sample
Princess is a ransomware-type virus that encrypts most data stored on the infiltrated computer. During encryption, Princess appends the names of compromised files with random extensions. This is quite uncommon, since most of ransomware appends a specific extension (for example, ".locked") or rena