The CypherLoc threat is a sophisticated scareware campaign initiated via phishing emails containing malicious links or attachments. Upon activation, it locks the victim's browser, displays fake security alerts with the victim's IP address, and presents a fraudulent support number; scammers then use this to extract sensitive information like banking details and passwords. This attack relies on psychological manipulation rather than a technical software exploit, so defense requires user education on phishing awareness and caution with unknown links.
Phishing CypherLoc scareware tricks millions into identity theft traps May 26, 2026 Share By SC Staff (Adobe Stock) Coverage from Tech Radar indicates that a massive wave of digital deception has swept across the internet since early 2026, catching millions off guard with a clever browser trick known as CypherLoc. Security researchers at Barracuda have warned that this strain has targeted approximately 2.8 million people through a combination of phishing and psychological manipulation. The CypherLoc attack begins with a phishing email containing a malicious link or attachment. Upon clicking, users are directed to a webpage that appears harmless until specific conditions are met, often when a system lacks adequate security scanning. The scareware then activates, forcing the browser into full-screen mode, disabling context menus, hiding the cursor, and displaying alarming security messages. A fraudulent support phone number is presented as the only solution. When users attempt to regain control or call the number, they are met by scammers posing as Microsoft support. These operators then extract sensitive information such as banking details and passwords. The attack notably retrieves and displays the victim's public IP address to personalize the threat and uses fake login pop-ups to increase user desperation. This method preys on fear rather than technical exploits, making caution with unknown senders and links crucial for defense. Source: Tech Radar SC Staff Related Phishing Facebook scam targets users over 40 with fake Aldi meat box offers SC Staff May 22, 2026 Malwarebytes has identified a phishing scheme circulating on Facebook that preys on individuals aged 40 and above. Phishing Tycoon2FA phishing kit evolves with device-code attacks on Microsoft 365 SC Staff May 18, 2026 The Tycoon2FA phishing kit has adapted to leverage OAuth 2.0 device authorization grant flows, enabling it to compromise Microsoft 365 accounts. Phishing Consumers face increasing online scams, as AI fuels sophisticated attacks SC Staff May 18, 2026 F-Secure's Scam Intelligence & Impacts Report reveals that 56% of consumers faced monthly scam attempts in 2025. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds