Track Global Malware Trends
View the trending of malware based on the 'detection count' reports of threats found in infected PCs and volume levels which reflect malware infection rates. For real-time data on malware outbreaks worldwide, visit MalwareTracker.
Top 10 Malware Threats
Rank Malware Infected PCs %Change Trend
1 Adware Helpers 2,043,928 -2%
2 Conduit Search/Toolbar 1,400,535 -1%
3 PUP.SupTab 901,744 -1%
4 Adware.SuperWeb 871,113 -2%
5 PUP.InstallCore 863,859 -1%
6 PUP.Optimizer Pro 816,597 -1%
7 Adware.Multiplug 712,317 -2%
8 Qvo6.com Hijacker 638,316 -0%
9 Adware.LinkSwift 635,299 0%
10 Iminent Toolbar 633,528 -1%
csv
Download as CSV
More Info
i

Top Security News

Top 20 Countries Found to Have the Most Cybercrime
Have you ever wondered which countries face the most cybercrime? If you have ever wondered which countries have the most cybercrime, then you may be surprised to know that there are few contributing factors that attract cybercriminals to specific regions of the world. Security research firm,...
Gmail Filter Virus Attacks Gmail Users Turning Them Into Spammers
A new vulnerability within the Gmail email account system, called Gmail Filter Virus, is currently affecting some Gmail users taking control of their account turning it into a virtual spam proxy. Many Gmail account users will utilize the 'filters' feature for various automation functions in...
Crafty Scammers Offer a Fake Survey Bypassing Script That is Really a Survey Scam Campaign in Disguise
Just when you think that you have heard about some of the most clever scams online, cybercrooks amaze us all again as they introduce their very own solution to online survey scams. The people responsible for survey scams are not only still tricking computer users through the use of their annoying...

More Articles

LaSuperba

LaSuperba may be associated with numerous problems that may be caused by PUPs (Potentially Unwanted Programs). LaSuperba may interrupt the computer users' activities when browsing the Web and cause performance problems on affected Web browsers. LaSuperba is linked to an adware that may affect most commonly used Web browsers on the Windows operating system, including Internet Explorer, Mozilla Firefox and Google Chrome. LaSuperba advertisements may take the form of irritating pop-up messages that make it very difficult to use the affected Web browser. In most cases, removing adware associated with LaSuperba will stop LaSuperba advertisements from appearing on affected Web browsers. However, most adware infections do not come alone; the presence of one adware component may indicate the presence of others, all of which may be connected with LaSuperba and similar unwanted content....

Posted on August 31, 2015 in Adware

VirLock Ransomware

Screenshot

The VirLock Ransomware is a ransomware Trojan that takes computers hostage and then demands payment from the computer users using BitCoin, a crypto-currency that is known for permitting anonymous online payments. The VirLock Ransomware will threaten computer users, claiming that the VirLock Ransomware has found pirated software on the infected computer and threatening to report the victim to the authorities unless the fine is paid. These claims have no basis. The VirLock Ransomware cannot check your computer for pirated software or alert the authorities. Rather, the VirLock Ransomware is engineered to lock down your computer and prevent access to your files. If the VirLock Ransomware...

Posted on December 10, 2014 in Ransomware

CryptoWall Ransomware

Screenshot

The CryptoWall Ransomware is a ransomware Trojan that carries the same strategy as a number of other encryption ransomware infections such as Cryptorbit Ransomware or CryptoLocker Ransomware . The CryptoWall Ransomware is designed to infect all versions of Windows, including Windows XP, Windows Vista, Windows 7 and Windows 8. As soon as the CryptoWall Ransomware infects a computer, the CryptoWall Ransomware uses the RSA2048 encryption to encrypt crucial files. Effectively, the CryptoWall Ransomware prevents computer users from accessing their data, which will be encrypted and out of reach. The CryptoWall Ransomware claims that it is necessary to pay $500 USD to recover the encrypted...

Posted on May 12, 2014 in Ransomware

CryptoLocker Ransomware

Screenshot

The CryptoLocker Trojan is a ransomware infection that encrypts the victim's files. CryptoLocker may typically be installed by another threat such as a Trojan downloader or a worm. Once CryptoLocker is installed, CryptoLocker will search for sensitive files on the victim's computer and encrypt them. Essentially, CryptoLocker takes the infected computer hostage by preventing access to any of the computer user's files. CryptoLocker then demands payment of a ransom to decrypt the infected files. CryptoLocker is quite harmful, and ESG security analysts strongly advise computer users to use an efficient, proven and updated anti-malware program to protect their computer from these types of...

Posted on September 11, 2013 in Ransomware

MyStart by Incredibar

Screenshot

MyStart is a browser hijacker that uses the MyStart by Incredibar toolbar and a browser hijacking component that forces its victims to visit the MyStart.Incredibar.com website. This website is a low-quality search engine that displays more advertisements than legitimate results. Even worse, several of MyStart's search results may lead computer users to websites containing malicious content. Although MyStart actually provides a supposed tool to remove this component from the victim's web browser, ESG security researchers recommend disregarding this component and instead removing MyStart with the help of a reputable anti-malware utility. MyStart can refer to both the low-quality...

Posted on July 31, 2012 in Adware

FBI Moneypak Ransomware

Screenshot

ESG security researchers have received reports of a ransomware infection, known as the FBI Moneypak ransomware, that targets computer users in the United States. The FBI Moneypak ransomware infection will claim that the victim's computer was involved in viewing child pornography and then demands payment of a 100 dollar 'fine' to be sent via MoneyPack. Of course, that a criminal charge as serious as child pornography would be punished with a mere 100 dollar fine is laughable. There is a reason for this, the FBI Moneypak ransomware is not really from the FBI. Rather, this message is actually part of a common malware scam. The FBI Moneypak ransomware scam will use a Winlocker, that is,...

Posted on June 25, 2012 in Ransomware

Live Security Platinum

Screenshot

Live Security Platinum is one of the many fake security programs in the WinWebSec family of malware. Although ESG security researchers have been following the family of malware for several years, Live Security Platinum is a relatively new variant first detected in 2012. Because of this, it is pivotal to ensure that your security software is fully updated. Like most fake security programs, Live Security Platinum is designed to induce PC users to purchase a worthless 'full version' of Live Security Platinum. To do this, Live Security Platinum will try to scare the computer user with a variety of fake error messages, pop-up alerts from the Taskbar and a convincing fake scan of the...

Posted on June 1, 2012 in Rogue Anti-Spyware Program

DNS Changer

Screenshot

DNS Changer is a Trojan that is designed to force a computer system to use rogue DNS servers. Also, DNS Changer is being referred to as the Internet Doomsday Virus, Ghost Click Malware, DNS Changer Rootkit, DNS Changer Malware, DNS Changer Trojan, DNS Changer Virus, FBI DNS Changer or DNSChanger. A DNS Changer infection will typically have two steps, in order to reroute the infected computer’s traffic to these malicious DNS servers: A DNS Changer malware infection will change the infected computer system’s settings, in order to replace the DNS servers to rogue DNS servers belonging to hackers or online criminals. The DNS Changer malware infection will then try to...

Posted on November 25, 2011 in Trojans

My Classifieds XP Ads

The My Classifieds XP Toolbar may be offered to users via freeware bundles and attract them by providing a customized search for coupons and discounts that they can use in local stores. Web surfers can visit Myclassifiedsxp.com and read more about its features, but they will be surprised unpleasantly. The My Classifieds XP Toolbar is and adware that is created by Informer Technologies, Inc. that security-aware users may know for the My Speedtest XP and Bargains Space adware. Moreover, the My Classifieds XP adware-powered toolbar may change your homepage and preferred search provider to Search.myclassifiedsxp.com that is using a custom Yahoo engine. Search.myclassifiedsxp.com is not as powerful as Google, and most search results would be commercials from sponsors of the My Classifieds XP adware. PC users that had the misfortune to install the My Classifieds XP adware may be...

Posted on February 5, 2016 in Adware

Muzik Fury Ads

The Muzik Fury browser extension may appear as an excellent addition to your Web browser because, according to to its description, Muzik Fury would allow you to create custom playlists with music videos from YouTube. The Muzik Fury extension can be found at Muzikfury.thewhizmarketing.com, and you may notice it listed beneath the 'Advanced' or 'Custom' option of many freeware installers. Security researchers alert that the Muzik Fury extension is an adware that should not be allowed to attach code to your Web browser. The Muzik Fury adware is similar to the GoGoGo Radio and Mobius Radio adware and may use ActionScript to load video commercials and prevent you from enjoying the video and audio content online. The Muzik Fury adware is developed by APN, LLC. that is associated with Media Search App and SoundJunkies . The Muzik Fury adware may appear on the 'Control Panel' of...

Posted on February 5, 2016 in Adware

Your Updater

The Your Updater software might show notifications in the bottom right corner of your desktop to welcome you to install updates and patches for programs that you have installed on your system. You might have installed the Your Updater software when you handled a freeware package with the 'Typical' or 'Express' option. Computer experts reveal that the Your Updater software is developed by Installer Technology Co. that is known for the Open Downloader Manager application. Additionally, the Your Updater software appears to be the next generation of the Open Software Updater that Installer Technology Co. released earlier. Computer users that experience pop-up windows and notifications by Your Updater in their tray area should be vigilant what they install on their PC. The Your Updater software is perceived as a Potentially Unwanted Program (PUP) because it is known to welcome users...

Posted on February 5, 2016 in Possibly Unwanted Program

EasyPhotoEdit Toolbar

The EasyPhotoEdit Toolbar may attract users that like to make photo collages and share their projects with friends. The EasyPhotoEdit Toolbar may provide users with links to Designrfix.com, Instantshift.com, and Photoshoptutorials.ws on their desktop and bookmarks bar. The EasyPhotoEdit Toolbar has an official page at Easyphotoedit.com that you may want to visit to know more about the application. PC users may install the EasyPhotoEdit Toolbar with freeware bundles that may include the RetroGamer Toolbar and Reimage Express . You might want to reconsider installing the EasyPhotoEdit Toolbar because it is an adware that is a creation of Mindspark Interactive Network, Inc. that is behind WebmailWorld and UnzipApp . The EasyPhotoEdit Toolbar adware might change your default search engine and homepage to Home.MyWebSearch.com that is associated with a browser hijacker. You...

Posted on February 5, 2016 in Bad Toolbars

Clash of Cash Ads

The Clash of Cash browser add-on is offered to users that want to shop smart and save a few dollars instead of wasting their budget on things they do not need. The Clash of Cash browser add-on is promoted at Clashofcash.net as a complete online shopping solution that users can use with Google Chrome, Internet Explorer and Mozilla Firefox. You should reconsider installing the Clash of Cash add-on because it is an adware that is designed to block the native ads on the sites you visit and load advertisements from partners only. The Clash of Cash adware might be used to provide users with misleading information and corrupted ads. PC users that are infected with the Clash of Cash adware may be welcomed to buy illicit goods and faulty machinery without the option for a refund. Moreover, the Clash of Cash adware may be registered as a system service and use your computer resources for...

Posted on February 5, 2016 in Adware

TeslaCrypt Ransomware Aggressively Spreads Through Compromised WordPress Sites

Ransomware has been one of the most aggressive types of malware threats we have encountered over the past year. With each new ransomware threat, the reach of cybercrooks effectively collecting ransom fees increases exponentially. As it turns out, cybercrooks spreading new encryption type ransomware threats are initiating campaigns of compromised WordPress sites to spread a variant of the TelsaCrypt Ransomware infection. Researchers at Heimdal Security have discovered instances where a campaign that was known to push the Neutrino Exploit Kit, effectively spreading the Backdoor.Andromeda malware, is being levered to compromised WordPress sites for the purpose of spreading TeslaCrypt Ransomware . We have had first-hand experience with TeslaCrypt Ransomware, and it has been ousted as a threat with a low detection rate essentially allowing it to spread must faster than other similar...

Posted on February 5, 2016 in Computer Security

‘Easysupportsystemhelp.xyz’ Pop-Ups

The Easysupportsystemhelp.xyz domain is used by uncertified computer technicians to welcome users to call 888-258-5284 and receive help in removing harmful programs. The services at Easysupportsystemhelp.xyz are promoted by a browser hijacker that may be dispersed among users via free software bundles. Computer users that are infected with the Easysupportsystemhelp.xyz browser hijacker may experience browser crashes and pop-up windows that look like security alerts and feature an audio recording designed to instill distress. The Easysupportsystemhelp.xyz browser hijacker might edit your Windows Registry and browser settings to simulate system errors and load pop-under windows that promote programs such as Super Optimizer and SystHeal Optimizer . The Easysupportsystemhelp.xyz pop-up alerts may feature a blue background image that is very similar to the BSOD error message by Windows...

Posted on February 4, 2016 in Browser Hijackers

’855-718-3514′ Pop-Ups

Even if the 855-718-3514 phone number is accompanied by images owned by Microsoft Corp., you should not call that phone number. The 855-718-3514 phone number is associated with a technical support tactic that is facilitated by a browser hijacker. The browser hijacker in question may land on your PC as a search enhancer that is supposed to provide additional search options for Google. However, browser hijackers are not helpful programs that anyone in his right mind would welcome on the computer. The pop-up windows that may appear as security alerts from Microsoft and instruct users to call 855-718-3514 should not be trusted. As stated above, a browser hijacker is used by third parties to show misleading security warnings that use official images from Support.Microsoft.com. Computer users that experience difficulties in closing the pop-ups associated with the 855-718-3514 phone number...

Posted on February 4, 2016 in Browser Hijackers

Sear4m.xyz

At Sear4m.xyz users may find a search engine that appears as a good starting point to surf the Internet because Sear4m.xyz has several links to Web services such as YouTube, AliExpress, eBay, Facebook, Amazon, and Instagram. You might want to know that the Sear4m.xyz site is associated with a browser hijacker that may arrive on your PC in the form of a browser plug-in named UStart. The UStart plug-in may affect the behavior of browsers such as Opera, Internet Explorer, Google Chrome and Mozilla Firefox. The UStart browser hijacker might edit you browser's configuration to change your default homepage and search provider to Sear4m.xyz. The developers of the UStart browser hijacker have designed it to redirect users to Sear4m.xyz and provide modified search results with a custom built of the Google engine. The search results that are provided on Sear4m.xyz may include links to harmful...

Posted on February 4, 2016 in Browser Hijackers

HydraCrypt Ransomware

The HydraCrypt Ransomware is a Trojan that is used by con artists to lock the data of infected users and demand payment for the release of a decryption key. The HydraCrypt cryptomalware is deployed to users using the Angler Exploit Kit , which is loaded on a remote server. Several compromised sites are known to propagate the HydraCrypt Ransomware among which are Drivers-softprotect.eu, Vyetbr.tk and Harbourfrontcentre.com. Many infections with the HydraCrypt Ransomware are facilitated with the Botime Trojan-Dropper that might plant the executable of the HydraCrypt Ransomware in the System32 folder under the Windows directory. Malware researchers note that the HydraCrypt Ransomware is relatively simple in behavior and is similar to the Buddy Ransomware . Once the user has been infected with the HydraCrypt Trojan, it would register itself to be run on the next system boot up. The...

Posted on February 4, 2016 in Ransomware

Great Hub Ads

The Great Hub application may attract the attention of users that need to maintain their accounts in social media services up-to-date. The Great Hub application is advertised as the best central hub for your social media updates and may allow users to upload and manage their social content on services such as Twitter, Google+, Facebook, YouTube, Vimeo, Pinterest and Instagram. Computer users should note that the Great Hub software does not have an official Web page and may be downloaded with free software packages only. You might wish to know that the Great Hub software falls into the category of adware, and it is best if you prevent it from accessing your social media feeds. Security investigators report that the Great Hub adware is a member of the Yontoo family of adware applications and may use tracking cookies and WEB storage data to generate tailor-suited ads. Moreover, the...

Posted on February 4, 2016 in Adware

eBay JSFu*k Vulnerability Allows Attackers to Peddle Malware and Phishing Sites

It's not very often that you find yourself viewing a website that is outright malicious in its content. Most times, malicious sites or ones that have clever phishing techniques are masked in some way to hide their true identity. Seldom do we find a site that screams "malicious," which is why a site like eBay has been the recent brunt of attacks carried out through user-created eBay stores to peddle malware and launch phishing sites. We have stressed the validated argument that hackers and cybercrooks back down at nothing to find new creative ways to attack people on the internet. Even so, cybercrooks use many trusted and high-traffic sites to launch their latest malware campaign. As such, eBay has been a service where crooks have found a vulnerability in its online platform that allows attackers to launch phishing sites and push malware to site visitors through a JSFu*k...

Posted on February 3, 2016 in Computer Security

Zquirrel.com

The Zquirrel.com website is associated with a browser hijacker that may be listed in your Extension Manager simply as Zquirrel. The Zquirrel extension may have arrived on your PC as a search optimizer, and you may notice it listed in the 'Control Panel' under the name Zquirrel Extension. The Zquirrel browser hijacker is developed by ClickMeIn Limited that are responsible for badware such as YellowSend and AnySend that they used to earn affiliate marketing revenue by pushing advertisements in the browsers of infected users. This time around, ClickMeIn Limited decided to step up their game and use the Zquirrel extension to alter the INI configuration of most browsers and Windows Registry. PC users that are affected by the Zquirrel browser hijacker may be subjected to use Zquirrel.com as their start page and default search provider. Also, the Zquirrel browser hijacker may edit their...

Posted on February 3, 2016 in Browser Hijackers

Play Crush Games Ads

The Play Crush Games platform can be found at Playcrushgames.com and Golfinggames.com where users have the chance to play games such as Fruita Swipe 2, Jewelish and Love Tester. The Play Crush Games platform may seem convenient to have a bit of fun while you are waiting for a report from your colleague and you have a few extra minutes while on your lunch break. However, the Play Crush Games platform is associated with an adware-powered browser extension that may be used to show corrupted ads and modify your search results on Google. The Play Crush Games adware is similar to the Shmehao Games and Games Bot and may change your homepage and load pop-up ads. Moreover, the Play Crush Games adware may alter the way Amazon, eBay, Walmart, and Best Buy are loaded in your Internet browser. Security researchers note that the Play Crush Games adware may use information such as your IP...

Posted on February 3, 2016 in Adware

Facts Right Ads

Computer users that favor extensive customization options and fast performance that the Mozilla Firefox browser provides should reconsider installing the Facts Right add-on. The Facts Right add-on is promoted at Factsright.com as a search enhancer, and users that need to do research on the Internet might be inclined to install it. However, the Facts Right add-in falls into the category of adware and is similar to the Seen On Screen adware. You may encounter the Facts Right adware in a free software package under the 'Advanced' or 'Custom' option. Security investigators report that the Facts Right adware is created to claim marketing revenue by injecting sponsored search results on Google, Bing, Yahoo and Yandex. Additionally, the Facts Right adware might read the Metadata of the pages you often visit and use ActionScript to substitute native ads with commercial content from...

Posted on February 3, 2016 in Adware
1 2 3 4 5 6 7 8 9 10 11 1,023