2-Spyware
What are you dealing with?
Pop-ups & adwareunwanted ads, push notificationsBrowser hijackerschanged homepage, redirectsRansomwarelocked or encrypted filesTrojans & backdoorshidden remote accessSpyware & keyloggersstolen passwords and dataScam emailsfake invoices, extortion, phishingFake alerts"your PC is infected" pagesRogue anti-spywarefake security tools that pretend to be realSuspicious filesis this .exe or process safe?Unsafe websitescheck a link before you open it
New membersthis monthAll
Community
Gary WhitfieldJust had a browser window on my Windows 11 PC pop up saying my saved passwords were at risk and I should click to check them. It looked a bit too urgent for my liking. I shut it straight away. Is that one dangerous, or just another scare message?
Exploited flawsThe Hacker News reports that attackers tampered with AOMEI Backupper’s update servers for short periods between May and July 2026, so some Windows copies that checked for updates during those windows downloaded and ran a backdoor. AOMEI says it fixed its servers, but that does not remove the backdoor from machines already hit. Windows users with AOMEI Backupper installed should update and check their systems for signs of compromise.
Jessica LaneJust got a fake “Windows security” pop-up on my Windows 11 laptop while I was balancing invoices in my home office. It said my browser was blocked and told me to call a number right away, but it looked off and kept flashing even after I closed the tab. Has anyone else seen this kind of scare message lately?Gary WhitfieldGot a browser tab on my Windows 11 PC this morning saying my “session had expired” and I needed to sign in again to keep things working. Looked a bit off, though. I shut it straight away and didn’t type anything. Is that just the site being daft, or something dodgy?
Hannah PriceThat sounds like another big step, but I’d still be careful about assuming the group is finished just because one arrest happened. On a Windows PC, I’d keep an eye on account logins, change any reused passwords, and review recent activity if there’s any customer-data concern.
Browser securityChrome’s Extended Stable channel has been updated to 152.0.7977.169 for Windows, with 10 security fixes included. Google says bug details may stay restricted until most users are protected. Windows users should update Chrome as soon as the new build reaches their devices.
Data breachesSecurityWeek reports that the UK’s Legal Aid Agency found records dating back to 1978 were compromised in an April 2025 data breach. The stolen data may include names, addresses, dates of birth, National Insurance Numbers, phone numbers, case reference numbers, and some account credentials. People who used the service should watch for suspicious account activity and be alert for phishing messages using this information.
Scam alertsHackread.com reports that an unprotected database linked to Vibetech exposed 13.7 million records, including names, phone numbers, email addresses, plaintext passwords and bank account details. The report says exposed passwords can be used to access email, shopping or financial accounts, steal personal information, make fraudulent purchases or impersonate victims, so users should change reused passwords and watch for phishing and account-takeover attempts.
Ethan ColeOne safety check I always tell people to do: in your browser, review the site permissions for camera, microphone, notifications, and clipboard. Scam pages often trick you into allowing one of them, and then keep bothering you later. If a random site got permission, remove it right away.
Daniel ReevesOne Windows habit people still get wrong: don’t just trust the file extension. In File Explorer, turn on View > Show > File name extensions so .pdf.exe and similar tricks are visible. If a “document” ends in .exe, that’s not a document. That’s Windows being polite about trouble.
Malware newsMalwarebytes Labs reports that Google has released Chrome 155.0.8059.79/.80 for Windows, and the update fixes 37 security flaws, including seven rated Critical. The easiest option is to let Chrome update automatically, but if the browser has not closed in a while or an extension blocks the update, open About Google Chrome and relaunch after checking for updates.
Browser securityMicrosoft Edge Blog says Edge is developing a seamless-updates prototype that could apply security updates in the background without interrupting your work. It also says people can turn on Restart to update on idle so pending updates install when the device is idle and open tabs are restored. Windows users should keep Edge updated, since the browser says faster updates reduce the patch gap.
Exploited flawsThe Hacker News reports that Silent Lynx is using crafted WinRAR archives exploiting CVE-2025-8088 to deploy reverse shells in attacks on government organizations across the CIS. The campaign also uses macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and malicious shortcut files. Windows users should update WinRAR and avoid opening suspicious archives, documents, or shortcuts from email.
Data breachesThe Record reports that the UK Legal Aid Agency breach is worse than first disclosed, with records now believed to go back to 1978. The stolen data can include names, dates of birth, National Insurance numbers, addresses, bank details and some partially redacted payment card details. The agency says it has strengthened authentication and access controls, improved monitoring and is retiring or isolating higher-risk legacy systems.
