Belonging to the Djvu ransomware family, Fordan is a high-risk infection designed to infiltrate computers and encrypt stored data, thereby rendering it unusable. During encryption, Fordan appends names of encrypted files with the ".fordan" extension. I.e., "sample.jpg" is renamed to "sample.jpg.fo
"Placed a malware on the xxx streaming site" is a typical scam which is distributed through a spam campaign (by sending bogus emails to many people). This particular campaign is categorized as a sextortion scam. Scammers who distribute it try to make recipients believe that humiliating material wi
"Enter Windows registration key to unblock" is the name of a technical support scam. Scammers use it to extort money from people, however, they can only do this if they are contacted in the first instance. Typically, websites of this type are opened by potentially unwanted apps (PUAs) installed on
page-ups.com is a common fake search engine that is promoted as supposedly useful and of value. It operates in the same way as other engines of this type. Some examples are internet-start.net, blpsearch.com, and funkystreams.com. Developers promote page-ups.com via rogue download/installation setu
Developers promote the Easy Speed Test App application as an internet performance testing tool that supposedly allows users to check internet connection speeds directly from their browsers. Unfortunately, it is also a potentially unwanted application (PUA), a browser hijacker. Like most apps of t
Win32/Malagent is a malicious program that is classified as a Trojan. Trojans are programs that steal personal details and confidential information, control computers remotely, proliferate other computer infections, and so on. Since Win32/Malagent is one of these rogue programs, it might cause ser
Discovered by Michael Gillespie, Recry1 is high-risk ransomware designed to stealthily infiltrate computers and compromise (encrypt) stored files. Additionally, Recry1 appends filenames with the ".recry1" extension (e.g., "sample.jpg" is renamed to "sample.jpg.recry1"). Encrypted data immediately
Berost's developers use this ransomware to encrypt victims' data and block access to it until ransoms are paid. This malicious program belongs to the Djvu ransomware family. It places a ransom message (within the "_readme.txt" text file) in all folders that contain encrypted files. Encrypted files
searchnewworld.com is a dubious website, a fake search engine that opens bing.com. Note that searchnewworld.com is opened by goto-searchitnow.global.ssl.fastly.net, which in turn, is opened by a number of unwanted applications/malware, such as Fake Calculator. Unlike browser hijackers, Fake Cal
apple.com-mac-booster[.]live is a deceptive website that is designed to promote the CleanupMy-Mac application. It is deceptive, since it displays a fake virus alert message stating that the visitor's computer is infected (this is false). It encourages visitors to remove viruses using the aforeme