YourTelevisionCenter.com is the domain for a browser hijacker named Your Television Center. The developer of the hijacker is the SaferBrowser company. That developer is notorious for its browser hijackers. The unwanted program changes the new tab window, homepage, and search…
Also known as Mircop ransomware, Crypt888 has recently been released with a newly updated version that pretends to be another notorious ransomware virus – Petya. The crypto-malware is very specific when it comes to file encryption, using the “lock” string…
Meet TrickBot, a relatively new banking Trojan believed to be a close relative of the old Dyre banker. According to researchers at Fidelis Cybersecurity, TrickBot, detected in September 2016 has a lot in common with Dyre. In case you don’t…
Tech support scams keep trying to use different tactics to work more efficiently. The latest such scam uses a Trojan horse which once launched, makes an executable file. That executable is named “WinInfos.exe”. Registry entries are created to make the…
Created by MacPaw Inc. this program is capable of cleaning unnecessary junk files from MacBooks running Mac OS. The program’s unique scanning algorithms give the possibility to free up unnecessary cache files as well as junk files, resulting in faster…
Strangely enough, a ransomware virus variant that has Anubis for it’s theme has appeared, leaving encoded files in .coded file extension after it encrypts them. The virus then changes the wallpaper of the affected computer with a distinctive one showing…
Created by MacPaw Inc. this neat program is aims to optimize a computer by cleaning up junk files and granting easier access to manual clean up of objects that are causing a computer to run slow. The program also has…
SafeSearch1.ru is a bogus search engine and the primary domain of a browser hijacker. This hijacker has a logo imitating the one of Google to an extent, looking at its letters and their color pattern. The hijacker will redirect you…
InspiringBackgrounds.com is a browser hijacker that is made by Mindspark Interactive. A related browser extension is hosted on this site. If you have the extension or more unwanted applications on your computer, know that they will switch your homepage, search…
The Acecard Android Trojan has been around for quite some time. We wrote about Acecard in February this year, but in fact the malware has been attacking devices since 2014, when it was first detected. Back in February, the Trojan…
There’s a new Linux Trojan, dubbed Linux/NyaDrop, and it’s already reverse engineered by MalwareMustDie. This is in fact the same researcher that discovered Mirai. The Mirai IoT botnet was used in multiple attacks and had a global infection rate. The…
Android may also be prone to backdoor access – through a debugging feature in the OS bootloader. However, only devices that have firmware developed by Foxconn appear to be inclined to this vulnerability. The OS bootloader can act as a…
What Is !XTPLOCK5.0 Cryptinfo.txt Ransomware? Cyber-criminals behind the e-mail crypt302@gmx.com have begun to demand 2 BTC from users via a ransomware virus that is dubbed “!XTPLOCK5.0” based on its ransom note string. Malware researchers, like Michael Gillepsie believe that this…
Google Go is the name of a ransomware cryptovirus. The virus is dubbed that way because it is built on Google’s program language “Go” and it is the first ever ransomware to do so. The Go language is free, open…
A Chinese version of Locky ransomware has been detected by malware researchers to drop a _HOWDO_text.html file after it encrypts files with the AES-128 and RSA-2048 ciphers and generates a unique decryption key. The Locky ransomware variants have been spreading…
PropellerAds.com is a website for a monetization platform. Although, the site can spread advertisements and you can be redirected to more, similar advertising networks. That is why it is regarded as adware. The owners of that ad network make some…
2016 has seen the highest rates of malware in terms of online shops running on platforms such as Magento and OpenCart. To conclude that, researcher Willem de Groot from Byte.nl has been analyzing online stores infected with malware since November…
GeoByPass.net is a domain for a program promoting a proxy service. The program offers to hide your original geographical location settings so you can work around any country restriction for services such as Netflix. Moreover, the program can change your…
New version of Philadelphia ransomware, which was part of the Stampado variants has been released, again using the same .locked file extension. The difference in this version is that it demands .3 BTC from affected victims and features a new…
A new case study by blockchain analytics startup Skry and infosec firm Terbium Labs has analyzed millions of URLs in order to outline the most popular sites for illegal Bitcoin trade. The researchers were also able to identify the most…
