Fraud & Scams

Fake CCleaner installs GhostDesk Chrome spyware

A convincing fake CCleaner website delivers a multi-stage malware attack that installs a spyware extension inside Chrome.

Why You Can’t Arrest Your Way Out of Youth Cybercrime

Two days at INTERPOL on youth cybercrime, why offender prevention is real police work and why it has to out-recruit rather than ou…

Valve warns Steam hardware buyers: Expect fake delivery scams

The warning affects recent buyers of Steam hardware, including the hugely popular Steam Deck.

Social media platforms crack down on drone factory recruiting game

Researchers found that games and major US social media platforms were used to lure young people into jobs in Russia's drone indust…

Sexual predators targeting online accounts for intimate images, FBI warns

The FBI is warning that criminals are breaking into social media to steal and distribute non-consensual intimate images and videos…

CyberheistNews Vol 16 #32 The Hugging Face Hack Is Now A PR Crisis That’s Costing OpenAI Millions

Love/hate relationship: The AI affair. Young people love AI, but it’s breaking their trust

The same technology making our lives easier is also making it harder. How are young people navigating this new world?

[FREE RESOURCE KIT] Cybersecurity Awareness Month Kit 2026 Now Available

Your mission, should you choose to accept it: Equip your team with the intel they need to stay ahead of global threat actors and t…

Watch out for fake TikTok Shops trying to steal your money

TikTok Shop is huge, so it's no wonder that impersonation shops have popped up. Here's how to stay safe.

Fake popular sites offer a free app, instead take over PCs

Fake branded download pages are tricking Windows users into installing legitimate remote-access software that's being abused by at…

Introducing Real-Time Coaching in KnowBe4’s AI-Native Security Awareness Training

Attackers are getting smarter. AI is making social engineering more convincing, more personalized, and harder to spot than ever be…

How to fake a data trail (and maybe lower prices) (Lock and Code S07E16)

This week on the Lock and Code podcast, we speak with Chris Parr about his inventive and all-too-funny stress-test of surveillance…

The Blind Spot: How “Bulletproof” Phishing Redirectors Slip Past SEGs

By Shikhar Dalela and Jeewan Singh Jalal The operators named the kit themselves. Buried inside compromised legitimate websit…

New turnkey kit makes it easy for anyone to become a scammer

We discovered a kit that gave us an insight into how modern online scams are built, promoted, and potentially used to target every…

Sexual Exploitation Actors Stealing and Leaking Explicit Content

Your KnowBe4 Fresh Compliance Plus Content Updates from July 2026

Fran Roberts - Studios General Manager, KnowBe4 Bribery and corruption do not always look the way people expect. They rarely…

Edge is dropping older extensions, affecting popular privacy tools

Microsoft is retiring Manifest V2, the technology behind older Edge extensions. Some popular privacy tools will lose features or s…

FTC Stops Sprawling Credit Repair Scheme that Scammed Consumers Out of Nearly $200 Million

At the request of the Federal Trade Commission, a federal court has temporarily halted a bogus credit repair scheme run by a spraw…

A week in security (August 3 – August 9)

A list of topics we covered in the week of August 3 to August 9 of 2026

AI chat bots are sliding into League of Legends friend requests

Chat bots are sending friend requests in Riot immediately after ending your game. What are the scammers up to now?

Meta ordered to pay $942 million over harm to children

A new court ruling not only fined Meta to the extent of $942 million but also ordered it to improve its age assurance tools.

Meta ordered to pay $942 million over harm to children

A new court ruling not only fined Meta to the extent of $942 million but also ordered it to improve its age assurance tools.

Your KnowBe4 Fresh Content Updates from July 2026

Fran Roberts - Studios General Manager, KnowBe4 Twenty years across studios, agencies and global production environments, si…

FTC Ditches ‘Disparate Impact’

The Federal Trade Commission today announced a policy statement clarifying that the Commission will not pursue claims based on dis…

AI Did Not Invent Social Engineering But It Did Industrialize It.

This year National Social Engineering Day falls on Aug. 6. This day is designed to give us an opportunity to remind people that cy…

Apple WebKit vulnerabilities reveal your IP address, despite Private Relay

Researchers have found three methods to bypass Apple's Private Relay which is supposed to shield users' IP addresses and location.

Scammers target OnlyFans users with deepfakes

Criminals are impersonating OnlyFans creators using AI tools in order to scam followers.

Amazon and Apple impersonated in “$149.99 unauthorized charge” scam

Different logos, different color schemes, same scam.

Anthropic’s Mythos AI used social engineering to target real people

Testers found that Anthropic's AI agent Mythos attempted to social engineer Github developers into accepting malicious code.

Google’s synchronized passkeys can be stolen in ‘Pass‑ta‑key’ attacks

Over time, passkeys are supposed to replace passwords. But what happens when malware steals the master key?