Lucid Motors found itself in a tough bind this week, fending off bankruptcy rumors and watching its stock price plunge as a result. The company quickly denied the report, calling it “completely false” and pointing to its available free cash flow as evidence that it has enough runway to operate into next year.
Technology
New malware can read your chats and steal your money
NEWYou can now listen to Fox News articles!
A new Android banking trojan called Sturnus is shaping up to be one of the most capable threats we have seen in a while. It is still in early development, but it already behaves like a fully mature operation.
Once it infects a device, it can take over your screen, steal your banking credentials and even read encrypted chats from apps you trust. The worrying part is how quietly it works in the background. You think your messages are safe because they are end-to-end encrypted, but this malware simply waits for the phone to decrypt them before grabbing everything.
It’s important to note, however, that Sturnus does not break encryption; it only captures messages after your apps decrypt them on your device.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Sturnus malware uses deceptive screens that mimic real banking apps to steal your credentials in seconds. (Kurt “CyberGuy” Knutsson )
A closer look at the malware’s capabilities
Sturnus combines several attack layers that give the operator nearly full visibility into the device, as reported by cybersecurity research firm ThreatFabric. It uses HTML overlays that mimic real banking apps to trick you into typing your credentials. Everything you enter goes straight to the attacker through a WebView that forwards the data instantly. It also runs an aggressive keylogging system through the Android Accessibility Service. This lets it capture text as you type, follow which app is open, and map every UI element on the screen. Even when apps block screenshots, the malware keeps tracking the UI tree in real time, which is enough to reconstruct what you are doing.
NEW ANDROID MALWARE CAN EMPTY YOUR BANK ACCOUNT IN SECONDS
On top of overlays and keylogging, the malware monitors WhatsApp, Telegram, Signal and other messaging apps. It waits for these apps to decrypt messages locally, then captures the text right from the screen. This means your chats may remain encrypted over the network, but once the message appears on your display, Sturnus sees the entire conversation. It also includes a full remote control feature with live screen streaming and a more efficient mode that sends only interface data. This allows precise taps, text injection, scrolling and permission approvals without showing any activity to the victim.
How Sturnus stays hidden and steals money
The malware protects itself by grabbing Device Administrator privileges and blocking any attempt to remove it. If you open the settings page that could disable those permissions, Sturnus detects it immediately and moves you away from the screen before you can act. It also monitors battery state, SIM changes, developer mode, network conditions and even signs of forensic investigation to decide how to behave. All this data goes back to the command-and-control server through a mix of WebSocket and HTTP channels protected with RSA and AES encryption.
When it comes to financial theft, the malware has several ways to take over your accounts. It can collect credentials through overlays, keylogging, UI-tree monitoring and direct text injection. If needed, it can black out your screen with a full-screen overlay while the attacker performs fraudulent transactions in the background. Since the screen is hidden, you have no idea anything is happening until it is too late.
7 ways you can stay safe from Android malware like Sturnus
If you want to protect yourself from threats like this, here are a few practical things you can start doing right away.
1) Install apps only from trusted and verified sources
Avoid downloading APKs from forwarded links, shady websites, Telegram groups or third-party app stores. Banking malware spreads most effectively through sideloaded installers disguised as updates, coupons or new features. If you need an app that isn’t in the Play Store, verify the developer’s official site, check hashes if provided and read recent reviews to make sure the app hasn’t been hijacked.
2) Check permission requests carefully before tapping allow
Most dangerous malware relies on accessibility permissions because they allow full visibility into your screen and interactions. Device administrator rights are even more powerful since they can block removal. If a simple utility app suddenly asks for these, stop immediately. These permissions should only be granted to apps that genuinely need them, such as password managers or accessibility tools you trust.
3) Keep your phone updated
Install system updates as soon as they arrive, since many Android banking trojans target older devices that lack the latest security patches. If your phone is no longer receiving updates, you are at a higher risk, especially when using financial apps. Avoid sideloading custom ROMs unless you know how they handle security patches and Google Play Protect.
HOW ANDROID MALWARE LETS THIEVES ACCESS YOUR ATM CASH
4) Use strong antivirus software
The malware quietly captures decrypted messages from apps like WhatsApp, Telegram and Signal right as they appear on your screen. (Kurt Knutsson)
Android phones come with Google Play Protect built in, which catches a large chunk of known malware families and warns you when apps behave suspiciously. But if you want greater security and control, choose a third-party antivirus app. These tools can alert you when an app starts logging your screen or trying to take over your phone.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.
5) Use a personal data removal service
A lot of these campaigns rely on data brokers, leaked databases and scraped profiles to build lists of people to target. If your phone number, email, address or social handles are floating around on dozens of broker sites, it becomes much easier for attackers to reach you with malware links or tailored scams. A personal data removal service helps clean up that footprint by deleting your info from data broker listings.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
6) Treat unusual login screens and pop-ups as red flags
Trojan overlays often appear when you open your bank app or a popular service. If the screen layout looks different or asks for credentials in a way you don’t recognize, close the app completely. Reopen it from your app drawer and see if the prompt returns. If it doesn’t, you probably caught an overlay. Never type banking details into screens that appear suddenly or seem out of place.
With remote control tools that stream your screen and automate taps, attackers can move money behind the scenes without you noticing. (Felix Zahn/Photothek via Getty Images)
7) Be cautious with links and attachments you receive
Attackers frequently distribute malware through WhatsApp links, SMS messages and email attachments pretending to be invoices, refunds or delivery updates. If you receive a link you weren’t expecting, open your browser manually and search for the service instead. Avoid installing anything that comes from a message, even if it appears to be from someone you know. Compromised accounts are a common delivery method.
DATA BREACH EXPOSES 400,000 BANK CUSTOMERS’ INFO
Kurt’s key takeaway
Sturnus is still a young malware family, but it already stands out for how much control it gives attackers. It sidesteps encrypted messaging, steals banking credentials with multiple backup methods, and maintains a strong grip on the device through administrator privileges and constant environmental checks. Even if the current campaigns are limited, the level of sophistication here suggests a threat that is being refined for larger operations. If it reaches wide distribution, it could become one of the most damaging Android banking trojans in circulation.
Have scammers ever tried to trick you into installing an app or clicking a link? How did you handle it? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Skullcandy announced a new version of its Crusher wireless headphones today featuring a few of Bose’s audio technologies including its QuietControl ANC and head-tracking spatial audio. The Crusher headphone line differentiates itself from the competition through the use of both full-range and dedicated bass drivers in each ear cup to boost deeper frequencies. Skullcandy admits that approach can result in a loss of audio quality when the bass is heavily boosted, but its new Crusher 1080 ANC are meant to address and improve that with Bose’s help.
Available starting today for $279.99 in black, candy, primer, and cement color options, the new Crusher 1080 ANC feature redesigned drivers with a stiffer diaphragm material resulting in enhanced clarity and detail with less distortion at higher volume. As with previous models in the Crusher line, the bass boosting is entirely adjustable using Skullcandy’s mobile app or the on-headphone controls that now include a more prominent dial on the outside.
The Crusher 1080 ANC will be the first non-Bose headphones to feature that company’s TrueSpatial audio technology with head tracking that works whether you’re stationary or out for a run and its WaveForm audio engine that “keeps audio full, balanced, and smooth.” Skullcandy’s latest will also offer industry-leading noise cancellation with Bose’s six microphone QuietControl ANC tech that adapts as sounds around you get louder or quieter. The Crusher 1080ANC even features Bose’s SpeechClarity that reduces noise so your voice comes through clearly during a call, but they’re not the first third-party headphones to offer it.
Battery life is estimated to be up to 60 hours with ANC turned off, or 50 hours with it on, while a 10-minute rapid charge will keep the Crusher 1080 ANC going for up to four hours if they die. There’s multipoint pairing for connecting and switching between multiple devices, auto reconnect and wear detection that pauses music when you take the headphones off, and a design that folds flat for easier storage. The Crusher 1080 ANC supports Bluetooth 5.3 with LE Audio, low latency audio, and Auracast.
NEWYou can now listen to Fox News articles!
You paid for the product. So why does it feel like the company still controls the screen? That is the question more of us are starting to ask as smart devices get updated long after we bring them home. A refrigerator can show ads in your kitchen. A car can flash offers on the dashboard. Even a Windows 11 computer can surface promotions before you get to work.
The frustrating part is that this often happens through software updates. You tap update because you want your device to stay secure and work properly. Then one day, the product you bought starts acting like a billboard. This is also why it pays to understand the hidden privacy clauses and settings that come with smart products before those screens start doing things you never expected.
GOOGLE TURNS OLD PHONES INTO CLOUD SERVERS
Smart devices from refrigerators to cars and computers can show ads after software updates, raising questions about who controls screens consumers already paid for. (Michele Tantussi/Getty Images)
Free live CyberGuy class: Sick of Spam? Join us July 22.
Join us Wednesday, July 22, at 1 p.m. ET for a free CyberGuy Live class that will help you cut down on robocalls, spam texts, junk email and other unwanted messages. Kurt “CyberGuy” Knutsson will walk you step by step through simple ways to filter spam, clean up your inbox and recognize the messages that could put your personal information at risk. No technical experience is needed. You’ll also receive our spam-stopping checklist, and every registrant will get a link to the class recording afterward.
Reserve your free spot today at CyberGuyLive.com.
Samsung Family Hub refrigerators started showing ads
Samsung Family Hub refrigerators are sold as connected kitchen hubs. You can use the screen for weather, calendars, grocery lists and other household features. But as we discussed on The CyberGuy Report podcast at CyberGuy.com, that same screen can also become a place for ads after a software update. Samsung began showing ads on some Family Hub refrigerator Cover Screens in the U.S. We reached out to Samsung about this, and a spokesperson provided us with this statement:
“Last year, Samsung piloted a new Cover Screen widget on Family Hub refrigerators in the U.S. The widget rotates through useful information like weather, news, calendar events, and curated ads. After the pilot concluded in March, the widget was launched fully with the same user experience.
Users can turn off the Cover Screen widget, including ads, in the Advertisements tab of the Settings menu (Settings > Advertisements > Cover screen Ads) without impacting any other features or functions. Ads can also be dismissed on the Cover Screens where shown, meaning that the dismissed ad will not appear again during that specific ad’s campaign period. Since the start of the pilot program last October, our review has indicated consumers are finding value in this new widget. The percentage of users who have turned off the feature is in the low single-digits.
A Cover Screen appears when the Family Hub screen is idle, and the widget only appears on the Weather, Color, and Daily Board themes. The widget does not appear on the Cover Screen’s Art or Album themes.”
That answer is important because Samsung says you can turn the Cover Screen ads off without losing other features. Still, the larger point remains. You bought a refrigerator, then a later update added an ad experience to the screen in your kitchen.
How to turn off Samsung Family Hub Cover Screen ads
On the Family Hub screen:
- Tap Settings
- Tap Advertisements
- Tap Cover Screen Ads
- Turn the switch off
You can also change the Cover Screen theme. Samsung says the widget does not appear on Art or Album themes.
Car screen ads appeared in Jeep, Ram and Chrysler vehicles
Now move from the kitchen to the driveway. Some Jeep, Ram and Chrysler drivers previously saw promotional messages on their infotainment screens through Stellantis’ Uconnect system.
Stellantis, the automaker behind Jeep, Ram, Chrysler and Dodge, says its In-Vehicle Message technology, or IVM, is designed to help the company stay in contact with owners at important points during ownership. The company says it uses IVM for important messages, such as vehicle recalls and vehicle health monitor alerts. Stellantis also confirmed that the earlier pop-up promotions were part of its in-vehicle messaging or Uconnect communication system. However, the company says it has not run the promotional in-vehicle messages referenced in those reports since mid-fall 2025 and has nothing planned for future in-vehicle promotional messages.
At the time those promotional messages were active, Stellantis says owners could opt out by calling customer service or by updating their profile or Message Settings on their vehicle brand’s website account, such as a Ram owner account. That update is important. There are no current promotional in-vehicle messages to opt out of, according to Stellantis. Still, the larger concern remains: modern vehicles are software-driven, and the screen in the middle of your dashboard can be changed long after you drive off the lot.
10 SMALL HOME UPGRADES THAT CAN LOWER YOUR MONTHLY BILLS
Some Jeep, Ram and Chrysler drivers previously saw promotional messages on infotainment screens through Stellantis’ Uconnect system. (Kurt “Cyberguy” Knutsson)
Why dashboard messages feel more intrusive
A car screen is different from a phone app or website. You use that display for directions, music, climate controls and vehicle settings. So when a promotional message appears there, it can feel more personal than an ad on a webpage.
To be fair, in-vehicle messaging can serve an important purpose. Recall notices and vehicle health alerts can help owners respond to safety or maintenance issues faster.
However, promotional messages hit differently. You are sitting in a car you paid tens of thousands of dollars for. That screen should help you drive, maintain your vehicle and get where you are going without feeling like another place for a sales pitch.
Windows 11 ads can appear in several places
Then there is your computer. Windows 11 can show promotional content in places that feel like part of the operating system. That includes the lock screen, the Start menu and account-related notifications.
The lock screen can use Windows Spotlight, which displays rotating images along with tips, tricks and notifications. Start menu settings also include areas where Microsoft can show recommendations and account prompts.
Some of these messages may look like helpful notices. Others can feel like upsells. The most annoying ones are the alerts that look urgent, then steer you toward a Microsoft service such as OneDrive backup. Microsoft declined to comment for this story.
How to reduce ads and suggestions in Windows 11
You can cut down on much of this in Settings.
Change the lock screen:
- Go to Settings
- Click Personalization
- Click Lock screen
- Change Windows Spotlight to Picture
- Turn off Get fun facts, tips, tricks and more on your lock screen
Reduce Start menu suggestions:
- Go to Settings
- Click Personalization
- Click Start
- Turn off any available toggles for recommendations, tips, suggestions or personalized offers
FIVE DATA BROKER OPT-OUT MYTHS THAT LEAVE RETIREES EXPOSED
Samsung says Family Hub refrigerator Cover Screen ads can be turned off, but the feature highlights how connected appliances can change after purchase. (SeongJoon Cho/Bloomberg via Getty Images)
Limit account-related prompts:
- Go to Settings
- Click Personalization
- Click Start
- Turn off Show account-related notifications
Microsoft may change wording over time, so look for anything tied to recommendations, tips, suggestions, offers or account notifications. For more Windows settings help, see these Windows 11 tips.
Device screen ads are spreading after you buy
The real problem isn’t one ad on one screen. It is the fact that software gives companies a way to change products after you buy them. A refrigerator used to stay a refrigerator. A car dashboard used to do what it did on the day you drove off the lot. A computer operating system used to feel like the tool you used to get things done.
Now those screens can change later. A company can add a widget, promote a service or push an offer through an update. That does not mean every update is bad. Security fixes are essential. Bug fixes help. New features can be useful. However, ads feel different when they arrive after you already paid for the product. That is why you should keep your devices updated, but also check what changed after the update installs.
What this means to you
Before you buy a smart appliance, connected car or computer, think beyond the hardware. Ask what kind of software controls the screen. Check whether ads, recommendations or promotional content can be turned off.
After setup, go through the settings before you assume the default experience is the only option. Look for menus labeled ads, recommendations, notifications, tips, offers or personalization. If you are setting up a new device, this new electronics setup guide is a good place to start.
Also, pay attention after updates. If a new widget or pop-up appears, do not assume you have to live with it. There may be a buried toggle that turns it off. Most of all, remember that a screen in your home, car or office has value. Companies know that. You should know it too.
Kurt’s key takeaways
This is exactly why we covered this on The CyberGuy Report podcast at CyberGuy.com. It hits a nerve because you already paid for these products, yet companies can still use software updates to claim space on the screens you see every day. Samsung says Family Hub Cover Screen ads can be turned off. Stellantis says its vehicle promotions stopped in the fall of 2025. Windows 11 gives you some settings that reduce tips, suggestions and account prompts. Still, the pattern is hard to ignore. Companies are learning how to keep making money from a product after the sale. That may be great for them, but it can feel pretty lousy when the screen is inside your kitchen, your car or your computer. When you pay thousands of dollars for a product, that screen should work for you instead of becoming another place for a company to sell to you.
Which screen ad would bother you most: one on your refrigerator, one on your computer or one in your car? Let us know by writing to us at CyberGuy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
But despite the swift response, the damage was widespread. The panic immediately bled into competing automakers, pulling down shares of Rivian and Polestar as investors speculated about the long-term survival of EV-only companies in the face of slowing consumer demand and whiplash policy shifts. And it cast a harsh light on the precarity of all three companies and the future of electric vehicles.
The trouble started on Tuesday, when EV trade publication EV reported that restructuring firm AlixPartners had advised Lucid’s board to consider Chapter 11 bankruptcy or a take-private deal. The report also said AlixPartners had encouraged the board to further restructure in the US and Europe and to focus on the Gravity SUV. But while the rest of the media has since reported on Lucid’s denial, no other publication has confirmed EV’s scoop. (For what its worth, EV’s URL is “eletric-vehicle.com,” enshrining the incorrect spelling in its address.)
Lucid confirmed that it had hired AlixPartners, but denied that the firm had made any such recommendations to its board. Instead, AlixPartners would provide advice on “improving execution, strengthening operations and positioning Lucid to realize the full potential of its technology, products and innovation,” Lucid chief communications officer Nick Twork said.
Lucid went a step further, filing a cease and desist order against EV
Lucid went a step further, filing a cease and desist order against EV, claiming that the site’s report directly led to the stock crash. “In short, your actions caused serious injury to a number of investors,” Lucid’s chief legal officer and general counsel, Brian Tomkiel, said in the letter. “And they injured, and continue to injure, Lucid directly.”
Still, the timing was terrible. Lucid is genuinely not in good shape, having lost over $1 billion in the first quarter of the year. The company has also gone through two rounds of layoffs in 2026, having cut 12 percent of staff in February and then 18 percent in June. The company also reduced production at its factory in Arizona in a bid to counteract its high inventory and save money. And there’s been leadership turmoil, with COO Marc Winterhoff departing the company and his position being eliminated entirely in an effort to flatten the structure.
The report sent the stock into freefall, plummeting as much as 50 percent in one of the worst single-day drops in Lucid’s history. And with Polestar and Rivian also catching strays, it’s generally been a glum time for companies not named Tesla trying make a go of exclusively building electric vehicles. Wall Street is panicking because the rumors are aligning with the bad news coming out of these companies’ earnings reports. EV sales are stabilizing, but recovery is still a distant promise. The all-electric future seems further away than ever.
Whether or not Lucid is actually weighing Chapter 11, it’s a sure sign of more turbulent waters ahead. Polestar getting strong-armed out of the US over its Chinese ties has left a lot of EV owners and dealers scratching their heads. Rivian is in an increasingly precarious position thanks to its huge, expensive bet on becoming a mass-market car company with the production of the R2.
All of these companies are increasingly reliant on big stakeholders — Lucid with Saudi Arabia’s Public Investment Fund, Polestar with Geely, and Rivian with Volkswagen — for their future survival. If any of these big backers get cold feet, the future could get really dark really fast.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
-
Los Angeles, Ca48 minutes agoWater main break floods West Hollywood streets, traps cars
-
Detroit, MI1 hour agoDetroit’s air quality early Thursday ranked as hazardous, worst in the world
-
San Francisco, CA1 hour ago‘It was a scene from the Titanic’: Fishermen recall rescuing passengers from sinking boat in SF Bay
-
Dallas, TX1 hour agoBig picture takeaways from the Dallas Mavericks first week at Summer League
-
Miami, FL2 hours ago“We’re going to be champions”. Argentina fans in Miami Beach celebrate team’s win against England
-
Boston, MA2 hours ago4 Red Sox Trade Targets to Solidify Boston’s Push for a Playoff Spot
-
Denver, CO2 hours agoRTD considers ending Denver’s 16th Street FreeRide shuttle due to budget issues
-
Seattle, WA2 hours agoTrump immediately fires the new court-appointed top prosecutor in Seattle | CNN Politics
