2-Spyware
What are you dealing with?
Pop-ups & adwareunwanted ads, push notificationsBrowser hijackerschanged homepage, redirectsRansomwarelocked or encrypted filesTrojans & backdoorshidden remote accessSpyware & keyloggersstolen passwords and dataScam emailsfake invoices, extortion, phishingFake alerts"your PC is infected" pagesRogue anti-spywarefake security tools that pretend to be realSuspicious filesis this .exe or process safe?Unsafe websitescheck a link before you open it
New membersthis monthAll
Community
Malware newsThe Hacker News reports that a malicious npm package called imgdecode is part of the MALFEX campaign targeting Windows systems. The package hides a loader in a Windows native addon and can download encrypted shellcode from GitHub, then inject it into a new dllhost.exe process. Windows users should avoid untrusted npm packages and check what software they install from developer tools and command lines.
Browser securityMicrosoft says the October KB5127648 security update for Windows 11 can stop some users from turning on Smart App Control. On affected devices, the option is grayed out in Windows Security. Microsoft has published temporary registry and Group Policy workarounds, but no permanent fix yet. Users who want this protection should check whether Smart App Control is already on and apply the workaround if needed.
Scam alertsKnowBe4 reports that researchers at ESET found a phishing campaign targeting YouTubers with phony sponsorship offers. The emails are personalized, use fake brand identities and domains, and try to get victims to grant access to their Google accounts. Users should verify sponsorship offers through official channels, check sender domains carefully, and not approve sign-in or access requests they do not recognize.
Data breachesThe Record reports that Anne Arundel County, Maryland, confirmed hackers stole files from government systems during an incident in August. Officials said they found irregular activity on August 28 and later determined an unauthorized actor copied certain files from a limited number of systems. Residents should watch for any breach notices and monitor accounts and records if they get one.
Hannah PriceThat’s a pretty alarming result for a browser issue, especially if it could be chained into something that reaches so many users. I’d be checking for Chrome updates right away and then reading the full write-up here: https://www.2-spyware.com/guide/chrome-security-updates.html
Claire HollowayThat is a worrying direction, especially if AI tools ever get good enough to copy themselves across devices or networks. On a Windows PC, the sensible move is to keep Windows Update on, watch for odd network activity, and disconnect anything suspicious straight away; if you want a simple checklist, see /guides/what-to-do-if-your-windows-pc-is-infected/TTonya CainWe need to close cash app when this girl is here and stole people identity from them and from Michigan state and money hungry and thats why I closed my cash app for my money and never linked to a bank account
Gary WhitfieldJust had a browser window on my Windows 11 PC pop up saying my saved passwords were at risk and I should click to check them. It looked a bit too urgent for my liking. I shut it straight away. Is that one dangerous, or just another scare message?
Exploited flawsThe Hacker News reports that attackers tampered with AOMEI Backupper’s update servers for short periods between May and July 2026, so some Windows copies that checked for updates during those windows downloaded and ran a backdoor. AOMEI says it fixed its servers, but that does not remove the backdoor from machines already hit. Windows users with AOMEI Backupper installed should update and check their systems for signs of compromise.
Jessica LaneJust got a fake “Windows security” pop-up on my Windows 11 laptop while I was balancing invoices in my home office. It said my browser was blocked and told me to call a number right away, but it looked off and kept flashing even after I closed the tab. Has anyone else seen this kind of scare message lately?Gary WhitfieldGot a browser tab on my Windows 11 PC this morning saying my “session had expired” and I needed to sign in again to keep things working. Looked a bit off, though. I shut it straight away and didn’t type anything. Is that just the site being daft, or something dodgy?Hannah PriceThat sounds like another big step, but I’d still be careful about assuming the group is finished just because one arrest happened. On a Windows PC, I’d keep an eye on account logins, change any reused passwords, and review recent activity if there’s any customer-data concern.Browser securityChrome’s Extended Stable channel has been updated to 152.0.7977.169 for Windows, with 10 security fixes included. Google says bug details may stay restricted until most users are protected. Windows users should update Chrome as soon as the new build reaches their devices.
Data breachesSecurityWeek reports that the UK’s Legal Aid Agency found records dating back to 1978 were compromised in an April 2025 data breach. The stolen data may include names, addresses, dates of birth, National Insurance Numbers, phone numbers, case reference numbers, and some account credentials. People who used the service should watch for suspicious account activity and be alert for phishing messages using this information.