Discovered by Malwrhunterteam, Homework is ransomware that emulates another program of this type called WannaCry. Ransomware-type programs are commonly designed to encrypt files and force victims to purchase a decryption tool/key. Homework modifies encrypted files by changing their names - it add
peegh1o[.]com is a rogue website designed to redirect visitors to other rogue sites. It shares many similarities with tontorcaltedron[.]info, feenotifyfriends[.]info, fortorsarrabse[.]info, and dozens of others. Users often visit peegh1o[.]com inadvertently - they are redirected by potentially un
TrojanDownloader.VBS.Agent (also known as TrojanDownloader:VBS/Agent.EH) is the name of a threat, a malicious VBScript script that is detected by virus detection engines (for example, Windows Defender). The script is embedded into HTML websites and designed to exploit a vulnerability described in
Bebloh is a malicious program categorized as a trojan. Typically, trojans are disguised as legitimate programs and there are various types. This particular one is designed to steal information without showing any signs of its presence. Bebloh runs in the system background, steals data, and sends i
Proxy Virus (also known as MITM Proxy Virus) is a type of browser-hijacking program that has recently become popular. In order to spread this infection, cyber criminals often use various adware-type applications. In most cases, these infiltrate computers without users' permission. Adware is als
Your Easy Forms is a browser app that supposedly allows quick access to various popular forms (for example, IRS and tax-related forms). This feature can be used directly from the browser's new tab (window). Note, however, that Your Easy Forms is a browser hijacker, a potentially unwanted app (PUA
feedmedia[.]me is a deceptive website that redirects visitors to other rogue sites and feeds them with dubious content. It shares many similarities with tontorcaltedron.info, torlock.com, fortorsarrabse.info, and many other sites. Most visitors arrive at feedmedia[.]me inadvertently - they are re
trovi.com is a dubious website promoted through potentially unwanted applications (PUAs) called hijackers. One of these hijackers is weknow.ac, which is bundled into the setup of a fake Flash Player installer (updater). Browser hijackers are categorized as potentially unwanted apps (PUAs) that
"Your Windows Computer Could Be Infected With Viruses!" is a scam promoted on an untrustworthy website that encourages visitors to remove viruses with a potentially unwanted application (PUA). Neither websites of this type nor software promoted through them should ever be trusted. If this page op
Discovered by Raby, LotR is high-risk ransomware belonging to the GlobeImposter ransomware family. As with most ransomware infections, LotR stealthily infiltrates computers and encrypts stored files. Additionally, LotR appends filenames with the ".[new_wave@tuta.io].LotR" extension (e.g., "sample.