A new variant of Djvu (STOP) ransomware that appends .booa extension to encrypted files has been reported. Booa ransomware may end up on a computer after a user installs a pirated version of some program. After installing, the ransomware would encrypt all important files and leave ransom notes called _readme.txt in users’ folders. The contents of a ransom note:
Indexspotcaptcha.com is a shady website that attempts to convince users that they have to click Allow on a “Show notifications” pop-up box in order to confirm that they are not robots. If a user does click Allow, that will turn on Indexspotcaptcha.com notifications on his or her computer/phone. The notifications will begin popping up periodically with links to dubious sites, scammy messages, ads, software offers, etc. Indexspotcaptcha.com notifications will appear in the lower right hand corner of the screen on a Windows PC, in the top right hand corner of the screen on a Mac, and on the lockscreen on a mobile phone.
Check-the.news is a dubious website that attempts to trick users into subscribing to its push notifications. Check-the-news claims that users have to click or tap Allow on its notifications request in order to watch a video, download a file, verify that they are not bots, or for another reason. If a user clicks Allow, Check-the.news notifications will start appearing in the top-right or bottom-right corner of the screen with ads, links to questionable sites, prompts to download something, etc.
Load3.biz is a dubious website that attempts to trick users into subscribing to its push notifications. Load3.biz claims that users need to click Allow on a “Show notifications” pop-up box in order to verify that they are not robots. If a user clicks Allow, he or she will start seeing Load3.biz notifications in the top-right or bottom-right corner of the screen (or on the lockscreen if it’s a mobile phone). Load3.biz notifications will pop up periodically with ads, links to dubious sites, scammy messages, software offers, etc.
Thehugefeed.com is a shady website which attempts to convince users that they have to allow its notifications on their devices. Thehugefeed.com tells users that clicking or tapping Allow on its notifications confirmation pop-up box is necessary if users want to access a page, play a video, download a file, etc. Should someone allow Thehugefeed.com’s notifications, those will start popping up from time to time on the right side of the screen on a PC or on the lockscreen on a smartphone. Thehugefeed.com notifications will advertise dubious sites and programs, urge users to join adult chatrooms, place bets in online casinos, read clickbait articles, etc.
Badkick.biz is one of many dubious sites that try to convince users to allow notifications from those sites on their computers. Badkick.biz may claim that users have to allow its notifications in order to access a webpage, play a video, verify that they are humans and not robots, or for some other reason. If someone ends up clicking Allow and turning on Badkick.biz notifications, those will start popping up periodically with ads, links to untrustworthy sites, software offers, scammy messages, etc. The notifications will appear in the bottom right hand corner of the screen on a Windows PC, in the top right hand corner of the screen on a Mac, and on the lockscreen on an Android device.
Fastmovies.bar is a questionable site which attempts to trick users into accepting its push notifications request. Fastmovies.bar may tell users that allowing its notifications is necessary to download a file, watch a video, open a page, etc. If a user clicks Allow and turns on Fastmovies.bar notifications, those will begin popping up periodically in the top-right or bottom-right corner of the screen. The notifications will advertise various dubious websites, prompt users to download suspicious programs or join adult chatrooms, etc.
Igdm is a new variant of Djvu (STOP) ransomware. Igdm may be downloaded on a computer together with some pirated software or with files from untrustworthy websites. Once inside, Igdm encrypts files on the computer and upends .igdm extensions to those files. The ransomware also drops ransom notes called _readme.txt in folders with encrypted files. The ransom note says:
Mediamoderna.biz is a questionable website that tries to convince users that they have to turn on its notifications for one reason or another: the site may tell users that clicking Allow on its “Show notifications” pop-up box if necessary if they wish to access a page, view a video, start a download, verify that they are not bots, etc. Should someone allow Mediamoderna.biz’s notifications, those will start showing up time and again on the right side of the screen (or on the lockscreen if it’s a mobile device). Mediamoderna.biz notifications will spam users with ads, links to untrustworthy sites, prompts to download fake software updates, etc.
Easybusy.biz is a dubious site which attempts to trick users into subscribing to its browser notifications. The site may tell users that they have to click or tap Allow on its notifications confirmation pop-up box if users wish to access some page, play a video, solve a CAPTCHA, etc. If a user clicks Allow, he or she will start seeing Easybusy.biz notifications on his or her screen from time t time. Easybusy.biz notifications will appear in a corner of the screen with ads, clickbait links, scammy messages, software offers, etc.