2-Spyware
What are you dealing with?
Pop-ups & adwareunwanted ads, push notificationsBrowser hijackerschanged homepage, redirectsRansomwarelocked or encrypted filesTrojans & backdoorshidden remote accessSpyware & keyloggersstolen passwords and dataScam emailsfake invoices, extortion, phishingFake alerts"your PC is infected" pagesRogue anti-spywarefake security tools that pretend to be realSuspicious filesis this .exe or process safe?Unsafe websitescheck a link before you open it
New membersthis monthAll
Community
Data breachesSecurityWeek reports that Meta is notifying about 1,500 people after hackers got into some of its GitHub repositories using an employee’s stolen credentials. Meta says most of the taken data was business code, but a small amount of personal data was also involved. Affected people are being offered credit and dark web monitoring, and Meta says it rotated secrets and added controls to keep user data off GitHub.
Browser securityThe Record reports that Microsoft has set November 10 as the last security update for Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions. Devices that stay on those versions after that will no longer get monthly security fixes, so administrators should move eligible PCs to a supported Windows 11 release and check Windows Update for version 26H2.
Martin BlakeOne Windows check people often skip: in File Explorer, turn on “show file name extensions.” It’s a simple one, but it catches a lot of fake invoices and “photo.jpg.exe” type tricks before you open them. I still see that catch people out every week.
Malware newsThe Hacker News reports that the XWorm RAT has gained new plugins that turn it into a surveillance tool on Windows. Netskope says the malware can now track location, stream audio, capture webcam video, and hijack authenticated browser sessions. Windows users should avoid cracked software and other untrusted downloads, since the activity increased after a cracked builder and source code were leaked.
Data breachesInfosecurity Magazine reports that ASOS confirmed an unauthorized intrusion into third-party platforms it uses to communicate with customers. Names, contact details and some non-payment account information were accessed, but the company said no payment-card information or account passwords were impacted. Customers should watch their accounts for suspicious activity and be careful with unexpected messages that could use stolen contact details.
Exploited flawsThe Hacker News reports that LG has fixed three webOS vulnerabilities that could let an attacker on the same local network gain root access to certain smart TVs without a PIN or any action from the owner. Owners of affected TVs should check for a firmware update. No workaround is available for those who cannot update yet.
Scam alertsMalwarebytes Labs reports that scammers are using short text messages to start conversations, often with a name pulled from breached data. The goal is to get a reply, then build trust or push a fake investment scheme. Windows users should not answer unknown texts, even with “Who’s this?” or “Wrong number,” and should report and block the sender instead.
Hannah PriceThis is worrying because it shows how quickly fake personas and polished text can be used to push misleading stories into normal news spaces. I’d be cautious with anything that looks overly neat or urgent, especially if it’s trying to shape opinions fast.
Oliver GrantHad one earlier on my Windows 11 PC where Chrome suddenly popped a “session expired” warning and wanted me to sign in again through a weird-looking page. The address bar looked off, and it started nagging for saved passwords straight away. I shut it down quick enough, but it was proper dodgy. Anyone else seen that sort of thing lately?
Jessica LaneJust got a “Microsoft account password expiring today” email on my Windows 11 laptop, and the wording felt off right away. The sender name looked normal, but the address was a mess of random letters, and the link wanted me to sign in through a page that didn’t look right. I deleted it, but it still made me pause. Are you all seeing more of these lately?
Ray DunbarThis morning on my Windows 10 desktop I got a small box that said my browser had a problem and I needed to call a support number right away. It was loud and kept flashing. I closed it with Task Manager, but it sure felt fishy. Is that dangerous, or just junk scareware?Scam alertsMalwarebytes Labs reports that phishing emails are now being aimed at AI assistants as well as people. Researchers found messages with hidden instructions that could make a summarizing tool describe an email as legitimate or urgent, or even suggest changing vendor payment details.
The advice is to check the original message before acting on any recommendation about money or sensitive information, verify payment changes through a separate trusted channel, and keep AI assistant permissions limited.
