Cafvdemyunderthf.xyz is a generic scam website that misuses a legitimate browser feature to scam users. When you visit the site, you will get a browser alert saying “Cafvdemyunderthf.xyz wants to show notifications”, and clicking “Agree” would allow the site to spam your desktop with ads. The site has no content and merely exists to expose users to ads.
…
Qmak ransomware is a generic file-encrypting malware that was released by the same cybercrime gang behind ransomware like Irfk and Palq. They all come from the same Djvu/STOP ransomware family and are very similar. You can identify which Djvu ransomware you’re dealing with by the extension that gets added to encrypted files. In this case, .qmak will be added to…
Eagreatassetto.xyz is a very generic scam website that pushes a social engineering scam to trick users into allowing advertisements on the desktop. It misuses a legitimate browser feature that allows sites with permission to show users push notifications on the desktop. This is why you will see a browser alert saying “Eagreatassetto.xyz wants to show notifications” as soon as you…
Qdla ransomware is a generic file-encrypting malware from the Djvu/STOP ransomware family. The group operating this ransomware has released hundreds of ransomware, all of which add their own extensions to encrypted files. This particular ransomware adds .qdla, which is why it’s known as Qdla ransomware. Once files are encrypted, you will not be able to open them unless you first use…
A coordinated law enforcement operation has led to the arrest of 7 hackers allegedly affiliated with the REvil group (also known as Sodinokibi), one of the most prolific cyber gangs in history. REvil, the successor of another notorious group GandCrab, is responsible for some of the biggest attacks on businesses and organizations in recent years, including the massive cyberattack on software…
Irfk ransomware is a generic ransomware infection from the Djvu/STOP ransomware family. It’s the most recent ransomware to be released by this cyber gang, one of the hundreds of mostly identical ransomware. The ransomware encrypts files and adds .irfk to them, which is how you can identify which ransomware you’re dealing with. Unfortunately, you will not be able to open…
Palq ransomware encrypts files and adds .palq to encrypted files. This file-encrypting malware comes from a notorious family of ransomware known as Djvu/STOP. The cyber gang controlling this ransomware releases new versions at least a couple of times a week, with hundreds of versions already released. Unfortunately, files with the .palq extension will be unopenable, unless you first run them…
Cool ransomware comes from the notorious Djvu/STOP family of file-encrypting malware. It’s a type of malware that essentially takes files hostage and demands money in exchange for a decryptor to recover them. This family has hundreds of ransomware in it, but this particular one can be identified by the .cool extension added to encrypted files. You will not be able…