Connect with us

Technology

Fake ad blocker breaks PCs in new malware extension scam

Published

on

Fake ad blocker breaks PCs in new malware extension scam

NEWYou can now listen to Fox News articles!

Fake browser extensions are nothing new, but this one takes things a step further by deliberately breaking your computer to scare you into infecting it.

Security researchers have uncovered a malicious Chrome and Edge extension called NexShield that pretends to be a fast, privacy-friendly ad blocker. Once installed, it crashes your browser on purpose and then tricks you into “fixing” the problem by running dangerous commands on your own PC.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

MALICIOUS GOOGLE CHROME EXTENSIONS HIJACK ACCOUNTS

Advertisement

A fake Chrome and Edge extension called NexShield crashes browsers to trick users into running malicious commands. (Sina Schuldt/picture alliance via Getty Images)

How the NexShield ad blocker scam works

NexShield was promoted as a lightweight ad blocker supposedly created by Raymond Hill, the real developer behind the popular uBlock Origin extension. That claim was false, but it helped the extension look legitimate enough to spread through online ads and search results before it was taken down from the Chrome Web Store.

Once installed, NexShield immediately starts abusing Chrome or Edge in the background. Researchers at Huntress found that it opens endless internal browser connections until your system runs out of memory (via Bleeping Computer). Tabs freeze, CPU usage spikes, RAM fills up and the browser eventually hangs or crashes completely.

After you restart the browser, NexShield displays a scary pop-up warning that claims your system has serious security problems. When you click to “scan” or “fix” the issue, you’re shown instructions telling you to open Command Prompt and paste a command that’s already been copied to your clipboard.

That single paste is the trap. The command launches a hidden PowerShell script that downloads and runs malware. To make detection harder, the attackers delay the payload execution for up to an hour after installation, creating distance between the extension and the damage it causes.

Advertisement

Why this fake browser extension attack is especially dangerous

This campaign is a new variation of the well-known ClickFix scam, which relies on convincing you to run commands yourself. Huntress calls this version CrashFix because instead of faking a system failure, it causes a real one.

In corporate environments, the attack delivers a Python-based remote access tool called ModeloRAT. This malware allows attackers to spy on systems, run commands, change system settings, add more malware and maintain long-term access. Researchers say the threat group behind it, tracked as KongTuke, appears to be shifting focus toward enterprise networks where the payoff is higher.

Home users weren’t the primary target in this campaign, but that doesn’t mean they’re safe. Even if the final payload was unfinished for consumer systems, uninstalling the extension alone is not enough. Some malicious components can remain behind. The biggest danger here isn’t a browser bug. It’s trust. The attack works because it looks like a helpful fix from a trusted tool, and it pressures you to act quickly while your system feels broken.

“Microsoft Defender provides built in protections to help identify and stop malicious or unwanted browser extensions and the harmful behaviors associated with them,” Tanmay Ganacharya, VP of Microsoft Threat Protection, told CyberGuy. “Our security technologies are designed to detect and mitigate tactics like the ones described in this campaign, and they are continuously updated to help keep customers safe. We encourage consumers and organizations to follow our security best practices for reducing exposure to social engineering based threats. Guidance on strengthening your security posture against techniques like this can be found in our blog, ⁠Think Before You Click(Fix): Analyzing the ClickFix Social Engineering Technique, on the Microsoft Security blog.”

We also reached out to Google for comment.

Advertisement

7 steps you can take to stay safe from malicious browser extensions

A few smart habits and the right tools can dramatically reduce your risk, even when malicious extensions slip past official app stores.

1) Only install extensions from trusted publishers

Before installing any browser extension, check the publisher name, official website and update history. Reputable tools clearly identify their developer and have years of user reviews. Be cautious of “new” extensions that claim to come from well-known creators, especially if the name or branding looks slightly off.

2) Never run unknown commands

No legitimate browser extension will ever ask you to open Command Prompt or paste a command to fix an issue. That’s a massive red flag. If something breaks your browser and then tells you to run system commands, close it and seek help from a trusted source.

3) Use a strong antivirus

Strong antivirus software can detect malicious scripts, suspicious PowerShell activity and remote access tools like ModeloRAT. This is especially important because these attacks rely on delayed execution that basic defenses might miss.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Advertisement

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

MALICIOUS MAC EXTENSIONS STEAL CRYPTO WALLETS AND PASSWORDS

After freezing your browser, the rogue extension urges users to paste a PowerShell command that installs malware. (Annette Riedl/picture alliance via Getty Images)

4) Use a password manager to limit fallout

If malware gains access to your system, stored browser passwords are often the first target. A password manager keeps credentials encrypted and separate from your browser, reducing the risk of account takeover even if something slips through.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Advertisement

Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

5) Keep Windows, Chrome and Edge fully updated

Security updates don’t just patch bugs. They also improve protection against malicious extensions, script abuse and unauthorized system changes. Turn on automatic updates so you’re not relying on memory to stay protected.

6) Consider an identity theft protection service

If malware ever runs on your system, assume personal data could be at risk. Identity protection services can monitor for misuse of your information, alert you early and help with recovery if fraud occurs.

Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com.

Advertisement

7) Reduce your online footprint with a data removal service

Many attacks become more effective when criminals already have your personal details. Data removal services help pull your information from broker sites, making it harder for attackers to craft convincing follow-up scams or targeted phishing.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

FAKE ERROR POPUPS ARE SPREADING MALWARE FAST

Advertisement

Security researchers say the NexShield ad blocker scam deliberately overloads memory to force a system crash. (Photo by Sebastian Gollnow/picture alliance via Getty Images)

Kurt’s key takeaway

Cybercriminals are getting better at blending technical tricks with psychological pressure. Instead of relying on exploits alone, they break things on purpose and wait for you to panic. If a browser extension crashes your system and then tells you to “fix” it by running commands, stop immediately. The safest response is not to fix the problem fast, but to question why you’re being asked to fix it at all.

How many browser extensions are installed on your computer right now? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Advertisement

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

The best Apple deals you can get during Prime Day

Published

on

The best Apple deals you can get during Prime Day

Amazon’s Prime Day is now in its second day, and whether you’re looking for a new pair of wireless earbuds or a smartwatch, there’s a good chance you’ll find a discount. The Apple Watch Series 11 has already dropped to a new low price, while the AirPods Pro 3 are discounted to $179. With Tim Cook warning that price hikes are coming, now may be the moment if you’ve been eyeing one of the company’s devices.

Below are the best Apple deals currently available. Some are exclusive to Prime Day, while others are simply great discounts we think are worth highlighting. We’ll continue updating this guide throughout Prime Day, highlighting more deals as they become available.

Earbud and headphone deals

Update, June 24th: Adjusted prices and availability, and added deals for Apple’s MagSafe Charger as well as the Apple Magic Keyboard.

Continue Reading

Technology

A new paper argues Microsoft exaggerated its quantum claims a year ago

Published

on

A new paper argues Microsoft exaggerated its quantum claims a year ago

A critique published in Nature Wednesday calls the basic technology behind Microsoft’s “breakthrough” quantum computing chip the Majorana 1 into question. Microsoft unveiled the chip in February 2025 and said it featured a brand-new technology known as a topological qubit. Topological qubits, they said, would be the “building blocks” for their future quantum computer. Microsoft announced the next generation chip Majorana 2 at Build earlier this month.

But in a peer-reviewed article, Henry Legg, a physicist at the University of St Andrews, reanalyzed Microsoft’s data on their device and argued that the company’s researchers did not conclusively demonstrate a working topological qubit in the first place.

Theory predicts that the electrons in this wire behave in a collective pattern known as a Majorana particle, for which the chip is named.

Proponents of quantum computing predict that the technology’s computational abilities will advance new medicine discovery, encryption, and machine learning. Companies like Google and IBM have already demonstrated more advanced machines than Majorana 1 or 2, although presently, no one has conclusively gotten any quantum computer to perform anything useful. But Microsoft claimed that Majorana 1, and subsequently Majorana 2, paved their path toward a practical quantum computer.

Microsoft’s design, unique among quantum computing companies, involves a tiny wire, thinner than a human hair, made of the semiconductor indium arsenide stuck to a superconductor. Theory predicts that the electrons in this wire behave in a collective pattern known as a Majorana particle, for which the chip is named. Microsoft wants to encode information in the properties of the Majorana particle. (A topological qubit is to a Majorana particle as a transistor is to silicon.)

Advertisement

Proponents of the Majorana particle think it is promising qubit material because theory predicts that when formed into topological qubits, the Majorana should compute with fewer errors than competing materials, such as superconducting circuits pursued by IBM. This suggests that ultimately, fewer topological qubits are needed to scale up to a useful quantum computer.

That is, if Microsoft has actually made a Majorana particle. “They haven’t convincingly shown that they have Majoranas,” Legg told The Verge. “You can’t make a qubit if you don’t have the Majoranas.”

In Legg’s critique, he writes that what Microsoft claims as a signature of the Majorana particle could actually be from the formation of quantum dots, which are electron-containing structures, in the device. Quantum dots would not be useful for building the quantum computer. He also writes that Microsoft cherry-picked their data.

“You can’t make a qubit if you don’t have the Majoranas.”

Microsoft’s team published a rebuttal in Nature disputing Legg’s interpretation of their data. Legg’s critique “does not constitute a substantial scientific challenge to our findings,” the Microsoft team wrote. Legg has not “proposed an alternative model that fits all of our data,” Chetan Nayak, a physicist leading Microsoft’s quantum team, told The Verge.

Advertisement

Legg first posted his critique on the online physics repository arXiv on February 26, 2025, within a week of Microsoft’s Majorana 1 announcement. It took a year for Nature to conduct a peer review and publish his article.

Meanwhile, on June 2, Microsoft announced a new chip, the Majorana 2, featuring what they claimed was the next generation of their topological qubits. The company says they can build a “scalable quantum computer” by 2029. “We 100% stand behind our results,” Nayak told The Verge. “We stand by our roadmap. We stand behind our long-standing commitment to scientific rigor and dialogue.”

Legg says the company’s characterization of Majorana 2, which Microsoft wrote in a non-peer reviewed manuscript, suffers from similar problems he pointed out a year ago. “Nothing in this [manuscript] resolves the fundamental issues that so many scientists have with this company’s previous claims,” Legg told The Verge.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Continue Reading

Technology

FCC phone ID plan could end burner phones

Published

on

FCC phone ID plan could end burner phones

NEWYou can now listen to Fox News articles!

Buying a phone without tying it directly to your identity could get much harder. The Federal Communications Commission (FCC) is considering tougher “know your customer” rules for voice providers.

The proposal would push phone companies to collect and keep more personal information before giving many new or renewing customers access to service. That could include your name, physical address, government-issued identification number and an alternate phone number.

The FCC says the goal is to make life harder for scammers, robocallers and criminals who abuse phone networks. That sounds reasonable at first. Nobody wants more fake bank calls, Medicare scam texts or urgent messages from crooks pretending to be family members. Yet this proposal raises a much bigger question. How much personal privacy should we give up to fight scam calls?

Sign up for my FREE CyberGuy Report

Advertisement
  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

GOOGLE SEARCH LED TO A COSTLY SCAM CALL

The FCC is considering tougher phone identity checks that could require more personal information before service begins. (Kurt “CyberGuy” Knutsson)

What the FCC phone ID proposal would require

The FCC phone ID proposal focuses on identity checks for originating voice providers. Those are the companies that allow calls to enter the phone network. Right now, the FCC already expects providers to take steps to know their customers and stop illegal calls. The new proposal would make those duties more specific. The FCC is asking whether providers should be required to obtain and retain certain customer information before granting service. At a minimum, that could include:

  • Name
  • Physical address
  • Government-issued identification number
  • Alternate telephone number

The FCC is also asking how these rules should apply to “new and renewing” customers. That phrase is important. A narrow version could focus on people opening new accounts. A broader version could reach people who switch plans or renew service with a current provider. For high-volume customers, including some business and foreign customers, the FCC is also asking whether providers should collect more information. That could include the intended use of the service and the IP address used to place calls, when applicable.

The FCC is also asking whether providers should retain KYC records for four years after the customer relationship ends, tied to the statute of limitations for certain illegal calling violations.

Why the FCC wants stronger phone identity checks

The FCC says scammers hide behind phone calls and texts to rip people off, then disappear before anyone can track them down. Anyone with a phone knows this problem has gotten out of hand. Most of us now look at an unknown number and assume trouble before we even answer.

The agency believes tougher identity checks could make it harder for bad actors to get onto phone networks in the first place. It also says better customer records could help investigators connect the dots after a scam call or text causes harm.

Advertisement

Here is where the proposal gets bigger. The FCC also asks whether stronger records could help law enforcement investigate crimes that go beyond scam calls, including national security threats and abuse in text messaging networks. So while robocalls are the headline, this proposal reaches much further. It could move phone service closer to an identity-check model that goes well beyond robocalls.

Why burner phones could become harder to buy

The FCC proposal does not specifically say it will ban burner phones. Still, the practical impact could be significant.  A burner phone usually refers to a prepaid phone or phone line with no clear identity link at the point of purchase. TV shows often connect burner phones with criminals. Real life is more complicated.

People use prepaid or private phone lines for plenty of lawful reasons. A domestic abuse survivor may need a safe phone that an abuser cannot easily trace through shared accounts. A journalist may need to protect a source. A whistleblower may need to call without exposing a personal number. Someone without a stable address may rely on prepaid service because it is easier to obtain.

If phone companies must collect a government ID number and physical address before service begins, anonymous or lightly identified prepaid service could become far harder to access. That is why privacy advocates see this as more than a robocall rule. They see it as a potential shift in how Americans get basic phone service.

HOW SCAMMERS BUILD A PROFILE ON YOU USING DATA BROKERS

Advertisement

Prepaid phones could face closer scrutiny if the FCC moves ahead with stricter “know your customer” rules. (Photographer: Brent Lewin/Bloomberg via Getty Images)

The FCC proposal could affect prepaid phone plans

Prepaid phones are a big part of this story. Some people use them to save money. Others use them because they want more control over what they spend or because a traditional phone plan creates hurdles they would rather avoid.

The FCC is now asking whether prepaid and postpaid customers should face different identity checks. That question is important because prepaid service has long been one of the easiest ways to get a working phone without a lengthy signup process.

A strict final rule could make prepaid service feel a lot more like opening a bank account. For some people, that may only mean another form to fill out. For others, especially someone trying to stay safe or keep a phone line private, it could be a much bigger deal.

The privacy risk behind a phone ID database

The most obvious concern is privacy. The quieter concern is cybersecurity. Phone companies already hold sensitive customer information. Adding government ID numbers, physical addresses and alternate phone numbers would make those records even more valuable to hackers.

Advertisement

If a telecom database gets breached, criminals may use stolen customer data for phishing, identity theft, SIM-swap attacks or stalking. A rule meant to stop scammers could create a richer target for scammers to steal. That to me is scary.

The FCC does ask how providers should protect customer information and how long records should be retained. Those are important questions. Still, better security rules would need real teeth. Sensitive data becomes a liability the moment it gets collected.

What “physical address” could mean for phone customers

The FCC is also asking whether P.O. boxes, shared office locations and similar addresses should count as a customer’s physical address. That detail could create real problems.

Some people do not have a traditional home address. Others may avoid sharing one because of safety concerns. A domestic abuse survivor may use a mailing address that keeps a home location private. A small business owner may use a shared office or mail service. If the final rule limits what counts as a valid address, some people could face a harder path to phone service. That may sound like a compliance detail. For someone trying to stay safe, it could matter a lot.

TOP 10 ROBOCALL HOT SPOTS IN AMERICA

Advertisement

Privacy advocates warn that stronger identity checks could make private phone access harder for people with legitimate safety concerns. (Kurt “CyberGuy” Knutsson)

What happens next with the FCC phone ID proposal

The FCC is taking public comments on the proposal through June 25, 2026. Reply comments are due July 27, 2026. After that, the agency can review feedback from phone companies, law enforcement, privacy groups, consumer advocates and the public.

The final rule could change. The FCC could narrow the requirements, add privacy safeguards, create exceptions or revise major parts of the proposal. For now, this is one to watch closely.

We reached out to the FCC for comment, but did not hear back before our deadline. 

How to reduce scam calls and texts now

You do not need to wait for a new FCC rule to protect yourself.

Advertisement

1) Let unknown calls go to voicemail

Do not feel pressured to answer every unknown number. A real caller can leave a message. A scammer wants you on the line fast, before you have a chance to slow down and think.

2) Turn on phone spam protections

On iPhone, go to Settings, tap Apps, scroll down and tap Phone, then go to the unknown caller settings. Choose Silence to send calls from unsaved numbers to voicemail, or choose Ask Reason for Calling if you want unsaved callers to provide more information before your iPhone rings. You can also look under Call Filtering and toggle on Unknown Callers and Spam

On many Samsung phones, open the Phone app, tap the three dots, tap Settings, tap Caller ID and spam protection and turn it on. Then, scroll down and make sure Block all spam and scam calls is toggled on. Settings may vary depending on your phone model.

3) Avoid links in unexpected texts

Go directly to the company’s app or website instead. That habit can help stop fake toll texts, bank scams and delivery alerts.

4) Reduce the personal info scammers can use against you

Scammers often sound convincing because they already know something about you. That information can come from people-search sites, data brokers, old breaches or public records. Consider using a data removal service to reduce how much of your personal information is floating around online. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Advertisement

5) Block and report suspicious messages

Do not just delete scam texts. On iPhone, open Messages. If you have not opened the message, swipe left on it, tap the Delete button, then tap Delete and Report Spam. If you have already opened it, tap Report Spam at the bottom of the message, then tap Delete and Report Spam. To block the sender, open the conversation, tap the sender’s icon at the top, tap Info, scroll down and tap Block Contact. Apple says reporting spam does not block the sender. Settings and carrier support may vary.

On many Samsung Galaxy phones using Google Messages, open the message, tap the three dots and choose Block and report spam, if requested confirm your decision by tapping Yes.  If you use Samsung Messages, touch and hold the conversation, tap More, then tap Block. Settings may vary depending on your phone model and messaging app.

6) Use antivirus software and a password manager

Strong antivirus software can help block phishing links and malicious websites before they cause damage. A password manager can also help you avoid reusing passwords if a scammer tricks you into entering login details on a fake page. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

7) Turn on account alerts

Turn on bank, credit card and phone carrier alerts so you know quickly if someone tries to make a charge, move money or change your account. Fast alerts can help you stop damage before it spreads.

Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes

Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here: CyberGuyLive.com

Advertisement

Kurt’s key takeaways

The FCC wants to stop scammers before they ever get onto the phone network. I get that. Scam calls and texts are out of control, and they have cost too many people real money. At the same time, the way the FCC is looking at this raises a real privacy concern. Asking phone companies to collect a government ID number, physical address and alternate phone number could change what it takes to get basic phone service in America. The FCC believes stronger customer records could help investigators track scammers after illegal calls happen. The question is whether scammers would still find ways around the rules while people with legitimate privacy needs face new hurdles. A domestic abuse survivor, journalist, whistleblower or person without a stable address may have a much harder time getting a private phone line. That is why any scam-fighting plan needs strong privacy safeguards. Before asking phone customers to hand over more personal information, the FCC should show how this data would reduce scams and how it would be protected.

Would you give your phone carrier a government ID number and physical address if it meant fewer scam calls, or does that go too far? Let us know by writing to us at CyberGuy.com.Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Advertisement
Continue Reading
Advertisement

Trending