Qmak ransomware removal

Qmak ransomware is a generic file-encrypting malware that was released by the same cybercrime gang behind ransomware like Irfk and Palq. They all come from the same Djvu/STOP ransomware family and are very similar. You can identify which Djvu ransomware you’re dealing with by the extension that gets added to encrypted files. In this case, .qmak will be added to…

Stop Eagreatassetto.xyz redirects

Eagreatassetto.xyz is a very generic scam website that pushes a social engineering scam to trick users into allowing advertisements on the desktop. It misuses a legitimate browser feature that allows sites with permission to show users push notifications on the desktop. This is why you will see a browser alert saying “Eagreatassetto.xyz wants to show notifications” as soon as you…

How to remove Qdla ransomware

Qdla ransomware is a generic file-encrypting malware from the Djvu/STOP ransomware family. The group operating this ransomware has released hundreds of ransomware, all of which add their own extensions to encrypted files. This particular ransomware adds .qdla, which is why it’s known as Qdla ransomware. Once files are encrypted, you will not be able to open them unless you first use…

REvil: arrests made in relation to massive Kaseya ransomware attack

A coordinated law enforcement operation has led to the arrest of 7 hackers allegedly affiliated with the REvil group (also known as Sodinokibi), one of the most prolific cyber gangs in history. REvil, the successor of another notorious group GandCrab, is responsible for some of the biggest attacks on businesses and organizations in recent years, including the massive cyberattack on software…

Delete Irfk ransomware

Irfk ransomware is a generic ransomware infection from the Djvu/STOP ransomware family. It’s the most recent ransomware to be released by this cyber gang, one of the hundreds of mostly identical ransomware. The ransomware encrypts files and adds .irfk to them, which is how you can identify which ransomware you’re dealing with. Unfortunately, you will not be able to open…

Palq ransomware removal

Palq ransomware encrypts files and adds .palq to encrypted files. This file-encrypting malware comes from a notorious family of ransomware known as Djvu/STOP. The cyber gang controlling this ransomware releases new versions at least a couple of times a week, with hundreds of versions already released. Unfortunately, files with the .palq extension will be unopenable, unless you first run them…

How to remove Cool ransomware

Cool ransomware comes from the notorious Djvu/STOP family of file-encrypting malware. It’s a type of malware that essentially takes files hostage and demands money in exchange for a decryptor to recover them. This family has hundreds of ransomware in it, but this particular one can be identified by the .cool extension added to encrypted files. You will not be able…

Cybersecurity news headlines for October 2021

October’s edition of cybersecurity news features three stories that made headlines. In early October, it was revealed that live-streaming platform Twitch has suffered perhaps one of the biggest hacks in recent years when the platform in its entirety got leaked online. The 125GB torrent was posted on a hacking forum and included the payouts for the platform’s biggest streamers. In…