2-Spyware — page 2
Top today
Scam alertsKnowBe4 reports that a phishing campaign is targeting Google accounts with fake offers of free Claude Max subscriptions. The site uses a browser-in-the-browser trick to show a fake Google login window, so users should avoid signing in from unexpected giveaway pages and check the real web address before entering credentials.
Oliver GrantHad a weird one on my Windows 11 box today: a browser page suddenly threw up a security warning saying my profile was “corrupted” and wanted me to sign in again through a cracked-looking prompt. Bit of a cheeky attempt, that. I closed it, checked Task Manager, and it was gone. Anyone else seen that sort of nonsense lately?
Exploited flawsThe Register reports that Microsoft is adding .msix and .msixbundle to Outlook’s block list. New Outlook for Windows and Outlook on the Web in Exchange Online will stop users from downloading or opening those attachments by default, because a malicious package could compromise a device. Administrators who need them can allow the file types before the rollout in early to mid-November 2026.
Gary WhitfieldGot an email on my Windows 11 PC saying my mailbox was nearly full and I had to click a button to keep it active. It looked a bit off, but the sender name was familiar enough. I left it alone. Is this likely a scam, and what’s the safest way to check without clicking anything?Scam alertsMalwarebytes Labs reports that Domino’s customers have received emails saying their account was accessed by a third party. Domino’s says its systems were not breached, and that the logins used a password and email combination stolen from another online account.
The company reset affected accounts and says customers should use a strong, unique password for every site, turn on two-factor authentication where available, and avoid following links in unsolicited emails. Unsolicited account-update emails claiming to be from Domino’s may be phishing attempts.
Hannah PriceThis evening on my Windows 11 laptop I got a message in my browser saying my payment info had been “verified” and I should review a failed delivery charge. It looked almost normal, but the sender address and the timing felt off, so I closed it and checked my account directly. Has anyone else seen these fake payment notices lately?
Malware newsThe Hacker News reports that a new ClickFix attack is using compromised websites to trick Windows users into running a malicious payload cached in the browser. The attack hides a script in browser cache, then uses it to fetch more payloads and target browser and device credentials. Windows users should avoid copying and running commands from unexpected sites or pop-ups, and be cautious of fake error, CAPTCHA, or browser update prompts.
Data breachesThe Record reports that Ukraine’s largest grocery store chain, ATB, confirmed a cyberattack after hackers posted an extortion demand on its website and claimed they had stolen data from millions of customers. The hackers said the data included names, phone numbers, email and physical addresses, password hashes, and employees’ passport information. People who shopped there should watch for phishing, change reused passwords, and monitor accounts for suspicious activity.
Jessica LaneThat’s pretty unsettling, especially if MicroVMs were being used to keep things nicely separated. I’m on a Windows 11 laptop at home, so I always pay attention when a “guest to host” issue shows up because it makes me wonder how much trust is really left in the isolation layer. What do you think—does this sound like a real escape risk or something that still needs a lot more proof?
Paul StevensAnother thing that keeps coming up is the so-called Windows support call scam. The pattern is usually the same: a pop-up or message says there is a serious problem, then pushes you to call someone right away. If you spot one, what do you do first: close the browser, check Task Manager, or just ignore it?
Loading…
No more articles
Could not load, try again