Activate subscription >
Add devices or upgrade >
Renew subscription >
Secure Hub >
Don’t have an account? Sign up >
< Products
< Resources
< Help
A tampered copy of FileZilla quietly contacts attacker-controlled servers using encrypted DNS traffic that can slip past traditional monitoring.
Disguised as a security check, this fake Google alert uses browser permissions to harvest contacts, location data, and more.
Attackers don’t always need custom malware. Sometimes they just need a trusted brand and a legitimate tool.
A fake Zoom meeting page looks real, triggers a bogus “update,” and silently installs a legitimate commercial monitoring product.
A convincing fake Avast site displays a €499.99 charge and promises a refund. Instead, it harvests your name, address, and full credit card details.
One extra letter in the domain is all it takes to hand over remote control of your system.
Attackers are weaponizing Facebook ads to distribute password-stealing malware masked as a Windows download.
An AI chatbot posing as Google’s Gemini is being used to pitch fake “Google Coin,” promising 7x returns.
Olympic merchandise is already being used as bait. We’ve identified nearly 20 fake shop sites targeting fans globally.
Contributors
Threat Center
Podcast
Glossary
Scams
