2-Spyware
What are you dealing with?
Pop-ups & adwareunwanted ads, push notificationsBrowser hijackerschanged homepage, redirectsRansomwarelocked or encrypted filesTrojans & backdoorshidden remote accessSpyware & keyloggersstolen passwords and dataScam emailsfake invoices, extortion, phishingFake alerts"your PC is infected" pagesRogue anti-spywarefake security tools that pretend to be realSuspicious filesis this .exe or process safe?Unsafe websitescheck a link before you open it
New membersthis monthAll
Community
Claire HollowayOne quick Windows check people miss after a phishing scare: turn on the “show file extensions” option in File Explorer. It helps you spot fake attachments like invoice.pdf.exe, which can look harmless at first glance but be a real .exe file.
Scam alertsKnowBe4 reports that Microsoft is tracking phishing campaigns that use meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content to deliver a masqueraded MSP360 installer. The installer is a legitimate remote monitoring and management tool that attackers abuse to gain access to affected devices and keep control after the first compromise. Users should be cautious with unexpected download prompts and messages that impersonate document-sharing, collaboration, or software pages.
Browser securityChrome has been updated for Windows and Mac to 155.0.8059.79/.80, and Google says the release includes 37 security fixes. The list includes critical bugs in Browser, PDF, Network, Core, SVG, Media, and ANGLE, plus high-severity issues in Passwords and Extensions. Windows users should update Chrome as soon as the new version reaches their device.
Scam alertsKnowBe4 reports that a phishing campaign is using AI-themed lures to target people who manage advertising accounts. The fake pages copy brands like Gemini, Claude, ChatGPT, Perplexity and Muse, and are built to steal passwords and intercept multifactor authentication codes. People should be careful with unexpected account-connection requests and check the real web address before entering any login details.
Malware newsMalwarebytes Labs reports that Microsoft’s October Patch Tuesday fixes 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Windows users should install the latest updates in Windows Update, restart if prompted, and check again until the system says it is up to date.
Data breachesThe Record reports that CISA and Ivanti warned about a new vulnerability in Ivanti Connect Secure that is being exploited. The attackers focused on credential theft, data exfiltration, log tampering and network reconnaissance. Ivanti said it is working with a limited number of customers who were affected. Windows users should update affected systems promptly, especially where VPN access is used to protect accounts and data.
Exploited flawsThe Hacker News reports that Google has fixed three Chrome bugs that could let an attacker run code on a Windows computer when a user only loads a web page. Two of the bugs were fixed in Chrome 152.0.7977.65 and 152.0.7977.82; Chrome updates automatically, but the fix only applies after the browser restarts, so Windows users should relaunch Chrome and confirm it is 152.0.7977.82 or later.
Paul StevensOne thing that keeps coming up lately is fake Windows update prompts. They often look convincing, but the usual pattern is still the same: a web page or popup tries to rush you into clicking something or calling a number. If Windows Update is the real issue, it shows up in Settings, not in a random browser message.
Ethan ColeThat’s a serious wake-up call. Platforms like this make account takeovers much easier, so I’d strongly recommend keeping two-step verification turned on and watching for any unusual sign-in alerts.
Martin BlakeNot surprised to hear that. In the Windows machines I see, the basics still matter most: keeping Defender on, Windows Update current, and watching for odd scripts or login prompts.
Daniel ReevesThat’s a neat little reminder that browser address bars are still a minefield if you’re not paying attention. Typosquatting with lookalike characters is the sort of trick that works because people are busy, which is, unfortunately, most of us.
Hannah PriceThis morning on my Windows 11 laptop I got a browser message saying my Microsoft account needed urgent verification or some services would be limited. It looked a bit too pushy, so I closed it and checked Settings and my account manually instead. Has anyone else seen these fake-looking account alerts lately?
Oliver GrantHad a grim wee one on my Windows 11 PC tonight: a browser tab started warning that my “sign-in session” had expired and tried to bounce me through a random verification page. Looked almost legit at first, but the URL was pure nonsense once I checked it. Anyone else seeing these fake login prompts lately?Data breachesSecurityWeek reports that Meta is notifying about 1,500 people after hackers got into some of its GitHub repositories using an employee’s stolen credentials. Meta says most of the taken data was business code, but a small amount of personal data was also involved. Affected people are being offered credit and dark web monitoring, and Meta says it rotated secrets and added controls to keep user data off GitHub.
