2-Spyware
What are you dealing with?
Pop-ups & adwareunwanted ads, push notificationsBrowser hijackerschanged homepage, redirectsRansomwarelocked or encrypted filesTrojans & backdoorshidden remote accessSpyware & keyloggersstolen passwords and dataScam emailsfake invoices, extortion, phishingFake alerts"your PC is infected" pagesRogue anti-spywarefake security tools that pretend to be realSuspicious filesis this .exe or process safe?Unsafe websitescheck a link before you open it
New membersthis monthAll
Community
Oliver GrantHad one earlier on my Windows 11 PC where Chrome suddenly popped a “session expired” warning and wanted me to sign in again through a weird-looking page. The address bar looked off, and it started nagging for saved passwords straight away. I shut it down quick enough, but it was proper dodgy. Anyone else seen that sort of thing lately?
Jessica LaneJust got a “Microsoft account password expiring today” email on my Windows 11 laptop, and the wording felt off right away. The sender name looked normal, but the address was a mess of random letters, and the link wanted me to sign in through a page that didn’t look right. I deleted it, but it still made me pause. Are you all seeing more of these lately?
Ray DunbarThis morning on my Windows 10 desktop I got a small box that said my browser had a problem and I needed to call a support number right away. It was loud and kept flashing. I closed it with Task Manager, but it sure felt fishy. Is that dangerous, or just junk scareware?
Data breachesSecurityWeek reports that iRhythm is notifying more than 360,000 people after hackers stole personal information from third-party-hosted business applications. The exposed data includes names, addresses, email addresses, dates of birth, phone numbers, and account and device details such as account numbers, serial numbers, insurance numbers, and dates of service. Affected people should watch for suspicious account activity and be alert for identity theft attempts.
Scam alertsMalwarebytes Labs reports that phishing emails are now being aimed at AI assistants as well as people. Researchers found messages with hidden instructions that could make a summarizing tool describe an email as legitimate or urgent, or even suggest changing vendor payment details.
The advice is to check the original message before acting on any recommendation about money or sensitive information, verify payment changes through a separate trusted channel, and keep AI assistant permissions limited.
Malware newsThe Hacker News reports that attackers are actively exploiting a critical Bricksforge WordPress flaw that can let unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites. The plugin versions up to and including 3.1.8.9 are affected, and users are advised to update to the latest version and check for unexpected PHP files and repeated submissions to the plugin’s form endpoint.
Martin BlakeOne check I keep telling people on Windows: have a look at Task Manager’s Startup tab and turn off anything you don’t recognise or don’t need. I get plenty of machines where the slow boot and odd pop-ups are just a pile of junk starting with Windows. Simple fix, big difference.
Exploited flawsSecurityWeek reports that attackers are already exploiting a critical SonicWall flaw in SMA1000 appliances days after it was disclosed. SonicWall says customers should update 6210, 7210, and 8200v models to versions 12.5.0-03082 or 12.4.3-03670. The bug could let a remote attacker direct the appliance to issue requests on their behalf and reach internal functionality.
Hannah PriceYesterday evening on my Windows 11 laptop I saw a security warning in the browser saying a file I downloaded was blocked because it might contain “updated payment details.” It looked odd because I had not been expecting any invoice or order file. I closed it, checked the Downloads folder, and deleted it. Has anyone else seen this kind of scam prompt lately?
Ethan ColeOne practical check people miss: in Chrome, Edge, or Firefox, make sure pop-ups and redirects are blocked. Scam pages often open extra tabs or fake “virus alerts” after one bad click. If a site keeps forcing new windows, close it and don’t keep trying to get through.Jessica LaneThis morning I got a “delivery exception” message on my Windows 11 laptop that looked like it was from a shipping company, but the tracking number didn’t match anything I was expecting. The page wanted me to confirm my address and card info to reschedule. I closed it right away and checked the order myself in the browser. Has anyone else seen these lately?Exploited flawsHelp Net Security reports that Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity flaw, CVE-2026-96940. The bug may let authenticated attackers read emails and attachments of other users in the same organization, so Exchange Server admins should install the update as soon as possible.
Scam alertsCyberscoop.com reports that federal authorities arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on charges of conspiracy of extortion. Court records say the case involves threats to the confidentiality of information to extort money, and the filing has been moved to the Eastern District of Texas. Ordinary users should stay alert to ransomware and extortion scams that pressure victims into paying.
