Shgv ransomware is a type of malware that encrypts files, generates a ransom note ("_readme.txt"), and appends its extension (".shgv") to filenames. This ransomware variant belongs to the Djvu family. An example of how Shgv modifies filenames: it renames "1.jpg" to "1.jpg.shgv", "2.jpg" to "2.jpg.
PrinterCyberSpace is a rogue app with adware and browser hijacker abilities. This piece of software is also classified as a PUA (Potentially Unwanted Application). Adware is capable of displaying various pop-ups, banners, coupons, and other intrusive ads on visited websites and/or differ
macOS.Macma is the name of a malicious program designed to steal information and spy on its victims. While outdated Catalina macOS (Macintosh operating system) versions are particularly vulnerable to this malware, it has been observed successfully operating on the newest Monterey macOS releases
Hukelpfulin[.]xyz is the address of a rogue website designed to load dubious content and/or redirect visitors to other (likely unreliable or malicious) pages. There are thousands of rogue sites online; earnmoneycrypt.com, hrougthatsidh.club, and ositieonthat.space are but a few examples. Users ty
Earnmoneycrypt[.]com is an untrustworthy site similar to profitsurvey24.com, linkwinners.net, yourcoolfeed.com, news-befuka.cc, and many others. This rogue webpage is designed to load dubious content and/or redirect visitors to various (likely unreliable or malicious) websites. Most users enter p
Push-defenders[.]com is used to promote questionable websites: it redirects visitors to those pages and promotes them via its notifications. Push-defenders[.]com is like tiontowriting[.]xyz, ewdownt[.]club, linkwinners[.]net, and hundreds of other pages. At the time of the research, push-d
Akin to linodeobjects.com, verifyrobots.online, tiontowriting.xyz, and thousands of others, profitsurvey24[.]com is a rogue website. It operates by loading questionable/deceptive content and/or redirecting visitors to various (likely unreliable or malicious) webpages. Rogue sites are seldom acces
Khonsari is the name of a ransomware family that encrypts files and forces users to pay a ransom to get a decryption tool. It is known that it appends the ".khonsari" extension to filenames (for example, renames "1.jpg" to "1.jpg.khonsari", "2.jpg" to "2.jpg.khonsari") and generates a ransom note
Wvjg8 is a ransomware-type program. It encrypts data and demands payment for the decryption. Affected files are appended with a random character string and a ".wvjg8" extension, e.g., a file like "1.jpg" would appear similar to "1.jpg.qHdHdzwknF54g1MOx26COacBiHBZerGx50wCbKDoV37_rEbHR7vU3eo0.wvjg8"
Tropi[.]fun can show notifications (if allowed) and redirect visitors to a number of potentially malicious pages. It has the same qualities as tiontowriting[.]xyz, ewdownt[.]club, luckydatingspot[.]top, and plenty of other similar pages that most users would never visit on purpose. Tropi[.