Connect with us

Technology

Fake software fixes fuel money-stealing malware threat

Published

on

Fake software fixes fuel money-stealing malware threat

Online protection firm Proofpoint warns that new and sophisticated malware that impersonates Google Chrome and Microsoft has the potential to steal money from Windows device owners. Multiple groups of cybercriminals are using this malware, including some known for sending spam emails that can infect computers with malware or ransomware.

The malware poses as fake updates in internet browsers like Chrome to trick users into downloading harmful code. Once the code is on the computer, the hackers can access cryptocurrencies, sensitive files and personal information.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

Microsoft laptops (Microsoft) (Kurt “CyberGuy” Knutsson)

Advertisement

How does the fake update malware work?

Proofpoint identified a larger distribution of the malware this month, but the online protection firm believes the campaign has been ongoing since March 2024. The malware poses as fake Google Chrome, Word and OneDrive errors to coerce users into downloading harmful code. These errors prompt the visitor to click a button to copy a PowerShell “fix” into the clipboard, then paste and run it in a Run dialog or PowerShell prompt.

“Although the attack chain requires significant user interaction to be successful, the social engineering is clever enough to present someone with what looks like a real problem and solution simultaneously, which may prompt a user to take action without considering the risk,” warns Proofpoint.

When the PowerShell script runs, it checks if the device is a valid target. Then, it downloads more payloads. These steps include clearing the DNS cache, removing clipboard content, showing a fake message, and downloading another remote PowerShell script.

ClickFix error message (Proofpoint) (Kurt “CyberGuy” Knutsson)

BEST ANTIVIRUS FOR PCS, MACS, IPHONES AND ANDROIDS – CYBERGUY PICKS

Advertisement

Cryptocurrency theft

This second script checks if it’s running on a virtual machine before downloading an info stealer. Once everything is ready, the hacker can access the victim’s cryptocurrency. This scheme redirects the victim’s funds to the hacker instead of the intended recipient.

Alternative attack method: Email lure

Proofpoint notes that bad actors also use another method called “email lure” to install harmful software. Emails, typically those that appear to be work- or corporate-related, contain an HTML file that resembles Microsoft Word. These emails prompt users to install the “Word Online” extension to view the document correctly.

Similar to the method above, users are prompted to open PowerShell and copy over malicious code. Proofpoint says the deceptive “campaign” is widespread. “The campaign included over 100,000 messages and targeted thousands of organizations globally,” according to the firm.

HTML attachment containing instructions on how to copy and paste PowerShell that leads to the installation of malware (Proofpoint) (Kurt “CyberGuy” Knutsson)

DON’T LET SNOOPS NEARBY LISTEN TO YOUR VOICEMAIL WITH THIS QUICK TIP

Advertisement

5 ways to protect yourself from harmful software

The fake Chrome and Microsoft Word malware creates a sense of urgency, making users click on the links and unknowingly compromise their devices. There are several steps you can take to protect yourself from such malware.

1) Have strong antivirus software: The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.

2) Use a VPN: Consider using a VPN to protect against being tracked and to identify your potential location on websites that you visit. Many sites can read your IP address and, depending on their privacy settings, may display the city from which you are corresponding. A VPN will disguise your IP address to show an alternate location. For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices.

3) Monitor your accounts: Regularly review your bank statements, credit card statements and other financial accounts for any unauthorized activity. If you notice any suspicious transactions, report them immediately to your bank or credit card company.

4) Place a fraud alert: Contact one of the three major credit reporting agencies (Equifax, Experian or TransUnion) and request a fraud alert to be placed on your credit file. This will make it more difficult for identity thieves to open new accounts in your name without verification.

Advertisement

5) Enable two-factor authentication: Enable two-factor authentication whenever possible. This adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone, in addition to your password.

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET

Kurt’s key takeaways

Hackers have cleverly designed malware that prompts you to install it on your devices. This malware specifically targets Windows users, and I’ve noticed that Windows devices seem to be more susceptible to these kinds of attacks. Recently, Microsoft admitted to a Wi-Fi driver flaw in Windows that allows hackers to hijack your PC simply by being on the same Wi-Fi network. It’s crucial to be cautious when browsing online or connecting to public Wi-Fi.

How do you verify the authenticity of software before downloading and installing it on your device? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Advertisement

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels

 Answers to the most asked CyberGuy questions:

Copyright 2024 CyberGuy.com. All rights reserved.

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Valve says it’s ready to launch the Steam Machine this summer

Published

on

Valve says it’s ready to launch the Steam Machine this summer

Valve now says that the delayed Steam Machine PC and Steam Frame VR headset are set to launch sometime this summer. In a Thursday blog post detailing its Verified programs for both pieces of hardware, Valve concludes by saying that “We’re excited for players to try your titles on the new Steam hardware once they launch this summer.”

When the company originally announced the Machine and Frame alongside its new Steam Controller late last year, it said that it would start shipping the new gadgets in early 2026. But in February, the company announced that the ongoing memory and storage crunch had forced it to revisit its pricing and shipping plans. And in March, Valve said in a blog post that it would be “shipping all three products this year” — though that was after the company initially said in the post that “we hope to ship in 2026,” which it removed in an update.

Valve opted to release the Steam Controller on its own, putting it up for sale in early May. For the Machine and Frame, while “summer” isn’t exactly a specific date, it narrows the window for when the products might finally come out.

Ahead of actually launching the devices, Valve is redesigning the Steam store and sharing information about the Verified programs for the hardware so that developers can prepare their games. Like with the Steam Deck, if a game is verified for the Machine or the Frame, the badge signals that the game should work well without any tweaks from the user.

For the Machine, the requirements for a game to be verified are “nearly identical” to what they are for the Steam Deck. With the Machine being “roughly six times as powerful” as the Deck, in theory, many more games will be verified for it. Valve also says that it’s testing “every title on Machine that fell below our performance requirements on Deck.”

Advertisement

For the Frame, Valve’s verified badge will signify games that run well while being played natively on the headset — as opposed to games that work well streamed to the headset, which the Frame is also capable of. “Like Steam Deck Verified, the Steam Frame Standalone Verified program focuses on the experience customers will have with the device out-of-the-box in standalone mode,” Valve says.

Now, we just need Valve to share exactly when the Steam Machine and Steam Frame will be released and how much they might cost. After last week’s price hikes for the Steam Deck, I’m gearing up for sticker shock.

Continue Reading

Technology

Are humanoid robots now coming for retail jobs?

Published

on

Are humanoid robots now coming for retail jobs?

NEWYou can now listen to Fox News articles!

Humanoid robots just got another real job. This time, they are clocking in behind the scenes at a major retail operation. Figure AI has signed a commercial agreement with Catalyst Brands. That is the company behind JCPenney, Aéropostale, Brooks Brothers, Eddie Bauer, Lucky Brand and Nautica.

The first rollout begins at Catalyst’s Reno, Nevada Distribution Logistics Center. So, no, these robots are not greeting shoppers or folding jeans in the store aisle. At least not yet.

For now, they are heading into warehouse and supply chain work. Still, the announcement has some people worried. Many see humanoid robots entering a workplace and immediately wonder what happens to human jobs. That concern is fair.

Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)

  • Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com.

THE AI-POWERED ROBOT ARMY THAT PACKS YOUR GROCERIES IN MINUTES

Figure’s humanoid robots are starting behind the scenes in Catalyst Brands’ Reno warehouse, not on the store floor. (Figure AI)

Advertisement

Figure’s humanoid robots enter warehouse work

Catalyst Brands says Figure’s humanoid robots will help with supply chain work. The companies say the robots will focus on repetitive, physically demanding sorting and packing tasks. In other words, this starts with warehouse work that can wear people down over time. The robots will first assist with Catalyst’s Joey Pouch sorting system in Reno. That system helps with computerized induction, sorting and packing inside the facility. Catalyst says the Reno site also underwent a $40 million infrastructure update in 2024.

“As we invest in and scale our portfolio, this collaboration with Figure shows how emerging technologies can modernize our operations while strengthening our workforce,” said Marc Rosen, CEO of Catalyst Brands. “When we automate routine tasks, our associates can focus on higher-value work and better serve our customers across all our brands.”

So, this is happening behind the scenes in the warehouse, not on the store floor. That detail is important, especially because some online reactions made it sound like robots were already headed into retail stores. The announcement points to warehouse operations first. Still, warehouse jobs are real jobs. That is why this deal is getting so much attention.

Why the Figure AI and Catalyst Brands deal stands out

Catalyst Brands owns several major retail brands and operates a large retail network. Figure AI also describes this as a step toward deploying humanoid robots at scale, even though it has not said how many robots will be used.

There is also a financial connection behind the scenes. Brookfield is an investor in Figure AI and also has a stake in Catalyst Brands. Figure says this is the first commercial bridge between Figure and a Brookfield portfolio company.

Advertisement

If the robots perform well in Reno, the companies could look for more ways to use them across the business.

AI LAYOFFS MAY BE BACKFIRING ON COMPANIES

The robots will first assist with repetitive sorting and packing work inside Catalyst’s updated distribution center. (Figure AI)

What Figure AI has not revealed yet

The announcement leaves out several key details. We do not know how many robots Figure AI will deploy. We do not know the exact start date. We also do not know whether Catalyst is buying the robots, leasing them or using a robots-as-a-service model. The companies have also not said how many human roles could change because of the rollout.

Figure AI says the robots are being integrated into Catalyst’s distribution facility and will focus on physically demanding work. However, the release does not spell out the exact jobs the robots will handle day to day.

Advertisement

That missing information gives people room to worry. It also gives people room to guess. And online, people did both. Some thought humanoid robots were coming straight into stores. Others focused on the bigger fear, which is that robots could take over jobs that people depend on.

Why humanoid robots make workers nervous

The fear around this deal goes beyond one company. Workers have already watched companies use AI to cut costs, slow hiring and reorganize teams. Now, physical robots are entering spaces where people lift, sort, pack and move products. That feels different.

Figure AI and Catalyst say the robots can handle routine tasks and help associates shift toward higher-value work. That sounds promising. However, workers may hear a very different message. They may wonder who gets retrained. They may also wonder who gets replaced. Companies cannot brush off those concerns. If humanoid robots are coming into more workplaces, workers deserve clear answers.

JOBS THAT ARE MOST AT RISK FROM AI, ACCORDING TO MICROSOFT

The big question is whether humanoid robots will help workers handle tough warehouse tasks or eventually replace some of those jobs. (Figure AI)

Advertisement

Why retail companies want warehouse robots

Warehouse work can be tough on the body. People lift boxes, move products, repeat the same motions and race to keep up when orders spike. That is why retail companies are looking hard at automation.

Figure’s pitch is that humanoid robots can fit into places already built for people. They do not need a warehouse rebuilt from scratch. In theory, they can step into certain jobs and help with repetitive work.

For a retailer, that could mean products move faster, and workers face less physical strain. It could also help during busy shopping seasons, when distribution centers get slammed.

What to watch next with Figure AI robots

The next big signal will be whether Catalyst expands the robot program beyond Reno. A small rollout may be a learning test. A wider deployment would point to a much larger shift in how retailers move products.

Watch for details on robot count, job duties and worker impact. Those specifics will tell us more than anything else. Also, pay attention to how companies talk about employees. If they say robots will help workers move into better roles, they should explain exactly how that will happen. Workers deserve more than buzzwords.

Advertisement

What this means for you

These robots may start in a warehouse, but the ripple effect could eventually reach workers, shoppers and prices.

For shoppers, the upside is easy to see. If robots help move products faster, stores may have fewer empty shelves. Online orders could also move through warehouses more quickly.

For workers, it gets more complicated. Companies often say robots will take over the hardest tasks so people can move into better roles. That sounds good, but workers need more than a promise. They need training. They need clear answers. They also need to know whether a robot is there to help them or replace them.

And for the rest of us, this raises a bigger question. Are we comfortable with retailers using humanoid robots if it makes shopping faster or cheaper? Or do we want companies to prove that people are still part of the plan?

Kurt’s key takeaways

Figure AI’s deal with Catalyst Brands shows how quickly humanoid robots are entering our workplaces. For now, these robots are starting in a distribution center. They are not walking through the aisles at JCPenney. That distinction is important. Still, the bigger concern remains. People want to know whether these machines will help workers or slowly push them aside. Automation can reduce hard physical work. It can also create real fear when companies avoid direct answers. Humanoid robots may soon become a normal part of warehouse operations for retailers. The real test will be whether companies use them in a way that helps people, instead of treating people like a cost to cut.

Advertisement

Would you shop with a retailer that uses humanoid robots in its warehouses, or would that make you think twice? Let us know by writing to us at CyberGuy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading

Technology

Cyberdecks used to look like little laptops, but now they’re getting more personal

Published

on

Cyberdecks used to look like little laptops, but now they’re getting more personal

Tan and countless other DIYers are attracting millions of views showing off the personal computers they’ve built inside purses, jewelry boxes, toys, and old tech, hiding Raspberry Pi boards inside art projects.

Cyberdecks, but make it fashion

The colorful, quirky builds popping up across social media are a drastic shift away from the typical look the cyberdecks we’ve featured have had, which often consisted of a 3D-printed chassis or a rugged box like a Pelican case, usually with a cyberpunk-style design.

Inside, these homemade devices are essentially mini Linux computers for specific tasks, usually done offline, like reading, journaling, or listening to music. But now, a cyberdeck doesn’t have to look like a computer at all.

Continue Reading
Advertisement

Trending