A critique published in Nature Wednesday calls the basic technology behind Microsoft’s “breakthrough” quantum computing chip the Majorana 1 into question. Microsoft unveiled the chip in February 2025 and said it featured a brand-new technology known as a topological qubit. Topological qubits, they said, would be the “building blocks” for their future quantum computer. Microsoft announced the next generation chip Majorana 2 at Build earlier this month.
Technology
WhatsApp Web malware spreads banking trojan automatically
NEWYou can now listen to Fox News articles!
A new malware campaign is turning WhatsApp Web into a weapon. Security researchers say a banking Trojan linked to Astaroth is now spreading automatically through chat messages, making the attack harder to stop once it starts.
The campaign is known as Boto Cor-de-Rosa. It shows how cybercriminals keep evolving, especially when they can abuse tools people trust every day. This attack focuses on Windows users and uses WhatsApp Web as both the delivery system and the engine that spreads the infection further.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
BROWSER EXTENSION MALWARE INFECTED 8.8M USERS IN DARKSPECTRE ATTACK
Attackers abuse WhatsApp Web to spread malware through messages that appear to come from people you trust. (Kurt “CyberGuy” Knutsson)
How this WhatsApp Web attack works
The attack starts with a simple message. A contact sends what looks like a routine ZIP file through WhatsApp. The file name appears random and harmless, which lowers suspicion. Once opened, the ZIP contains a Visual Basic script disguised as a normal document. If the user runs it, the script quietly pulls in two more pieces of malware. Then the script downloads the Astaroth banking malware written in Delphi. It also installs a Python-based module designed to control WhatsApp Web. Both components run in the background without obvious warning signs. From there, the infection becomes self-sustaining.
Malware that spreads itself through your contacts
What makes this campaign especially dangerous is how it propagates. The Python module scans the victim’s WhatsApp contacts and sends the malicious ZIP file to every conversation automatically. Researchers at Acronis found that the malware adapts its messages based on the time of day. It sends friendly greetings, making the message feel normal and familiar. The text reads, “Here is the requested file. If you have any questions, I’m available!” Because the message appears to come from someone you know, many people open it without hesitation.
NEW MALWARE CAN READ YOUR CHATS AND STEAL YOUR MONEY
A single ZIP file sent through chat can quietly install banking malware and begin spreading to every contact. (Kurt “CyberGuy” Knutsson)
Built-in tracking keeps the attack efficient
This malware is carefully designed to monitor its own performance in real time. The propagation tool tracks how many messages are successfully delivered, how many fail to send, and the overall sending speed measured per minute. After every 50 messages, it generates progress updates that show how many contacts have been reached. This feedback allows attackers to measure success quickly and make adjustments if something stops working.
What happens after infection
The initial script is heavily obfuscated to avoid detection by antivirus tools. Once it runs, it launches PowerShell commands that download more malware from compromised websites. One known domain used in this campaign is coffe-estilo.com. The malware installs itself inside a folder that mimics a Microsoft Edge cache directory. Inside are executable files and libraries that make up the full Astaroth banking payload. From there, the malware can steal credentials, monitor activity and potentially access financial accounts.
Why WhatsApp Web is being abused
WhatsApp Web is popular because it mirrors your phone conversations on a computer. That convenience makes it easy to send messages, share files and type faster, but it also introduces risk. When you use WhatsApp Web, you link your phone to a browser by scanning a QR code at web.whatsapp.com. Once connected, that browser session becomes a trusted extension of your account. Your chats appear on the screen, messages you send come from your real number and incoming messages sync across both devices.
That setup is exactly what attackers take advantage of. If malware gains access to a computer with WhatsApp Web logged in, it can act as the user. It can read messages, access contact lists and send files or links that look completely legitimate. The messages do not raise alarms because they are coming from a real account, not a fake one.
This is what turns WhatsApp Web into an effective delivery system for malware. Instead of breaking into WhatsApp itself, attackers simply abuse an open browser session to spread malicious files automatically. Many users do not realize the danger because WhatsApp Web feels harmless. It is often left signed in on work computers, shared devices or systems without strong security. In those situations, malware does not need advanced tricks. It only needs access to an already trusted session. That combination of convenience and trust is why WhatsApp Web has become such an attractive target.
MALICIOUS MAC EXTENSIONS STEAL CRYPTO WALLETS AND PASSWORDS
Once WhatsApp Web is compromised, malware can act like the user, sending messages and files that look completely legitimate. (Kurt “CyberGuy” Knutsson)
How to stay safe from WhatsApp Web malware
Attacks like this WhatsApp Web malware are designed to spread fast through trusted conversations. A few smart habits can dramatically lower your risk.
1) Be skeptical of unexpected attachments
Messaging apps feel casual, which is exactly why attackers use them. Never open ZIP files sent through chat unless you confirm with the sender first. Watch for file names made of random numbers or unfamiliar names. Treat messages that create urgency or feel overly familiar as a warning sign. If a file arrives out of nowhere, pause before clicking.
2) Lock down WhatsApp Web access
This campaign abuses WhatsApp Web to spread automatically once a device is infected. Check active WhatsApp Web sessions and log out of any you do not recognize. Avoid leaving WhatsApp Web signed in on shared or public computers. Enable two-factor authentication (2FA) inside WhatsApp settings. Cutting off Web access helps limit how far malware can travel.
3) Keep your Windows PC locked down and use strong antivirus software
This type of malware takes advantage of systems that fall behind on updates. Install Windows updates as soon as they are available. Also, keep your web browser fully updated. Staying current closes many of the doors attackers try to slip through. In addition, use strong antivirus software that watches for script abuse and PowerShell activity in real time.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.
4) Limit how much of your personal data is online
Banking malware often pairs with identity theft and financial fraud. One way to reduce the fallout is by shrinking your digital footprint. A data removal service can help remove your personal information from data broker sites that attackers often search. With less information available, criminals have fewer details to exploit if malware reaches your device.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com
5) Add identity theft protection for extra coverage
Even with strong security habits, financial monitoring adds another layer of protection. An identity theft protection service can watch for suspicious activity tied to your credit and personal data. Identity theft companies can monitor personal information like your Social Security number (SSN), phone number, and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.
You should also turn on alerts for bank and credit card transactions so you are notified quickly if something looks wrong. The less exposed your data is, the fewer opportunities attackers have to cause damage.
See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com.
6) Slow down and trust your instincts
Most malware infections happen because people act too quickly. If a message feels off, trust that instinct. Familiar names and friendly language can lower your guard, but they should never replace caution. Take a moment to verify the message or file before opening anything. Attackers rely on trust and urgency to succeed. Slowing down takes away their advantage.
Kurt’s key takeaways
This WhatsApp Web malware campaign is a reminder that cyberattacks no longer rely on obvious red flags. Instead, they blend into everyday conversations and use familiar tools to spread quietly and quickly. What makes this threat especially concerning is how little effort it takes for it to move from one device to dozens of others. A single click can turn a trusted chat into a delivery system for banking malware and identity theft. The good news is that small changes make a big difference. Paying attention to attachments, locking down WhatsApp Web access, keeping devices updated and slowing down before clicking can stop these attacks cold. As messaging platforms continue to play a bigger role in daily life, staying alert is no longer optional. Awareness and simple habits remain some of the strongest defenses you have.
Do you think messaging apps are doing enough to protect users from malware that spreads through trusted conversations? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Amazon’s Prime Day is now in its second day, and whether you’re looking for a new pair of wireless earbuds or a smartwatch, there’s a good chance you’ll find a discount. The Apple Watch Series 11 has already dropped to a new low price, while the AirPods Pro 3 are discounted to $179. With Tim Cook warning that price hikes are coming, now may be the moment if you’ve been eyeing one of the company’s devices.
Below are the best Apple deals currently available. Some are exclusive to Prime Day, while others are simply great discounts we think are worth highlighting. We’ll continue updating this guide throughout Prime Day, highlighting more deals as they become available.
Earbud and headphone deals
Update, June 24th: Adjusted prices and availability, and added deals for Apple’s MagSafe Charger as well as the Apple Magic Keyboard.
But in a peer-reviewed article, Henry Legg, a physicist at the University of St Andrews, reanalyzed Microsoft’s data on their device and argued that the company’s researchers did not conclusively demonstrate a working topological qubit in the first place.
Theory predicts that the electrons in this wire behave in a collective pattern known as a Majorana particle, for which the chip is named.
Proponents of quantum computing predict that the technology’s computational abilities will advance new medicine discovery, encryption, and machine learning. Companies like Google and IBM have already demonstrated more advanced machines than Majorana 1 or 2, although presently, no one has conclusively gotten any quantum computer to perform anything useful. But Microsoft claimed that Majorana 1, and subsequently Majorana 2, paved their path toward a practical quantum computer.
Microsoft’s design, unique among quantum computing companies, involves a tiny wire, thinner than a human hair, made of the semiconductor indium arsenide stuck to a superconductor. Theory predicts that the electrons in this wire behave in a collective pattern known as a Majorana particle, for which the chip is named. Microsoft wants to encode information in the properties of the Majorana particle. (A topological qubit is to a Majorana particle as a transistor is to silicon.)
Proponents of the Majorana particle think it is promising qubit material because theory predicts that when formed into topological qubits, the Majorana should compute with fewer errors than competing materials, such as superconducting circuits pursued by IBM. This suggests that ultimately, fewer topological qubits are needed to scale up to a useful quantum computer.
That is, if Microsoft has actually made a Majorana particle. “They haven’t convincingly shown that they have Majoranas,” Legg told The Verge. “You can’t make a qubit if you don’t have the Majoranas.”
In Legg’s critique, he writes that what Microsoft claims as a signature of the Majorana particle could actually be from the formation of quantum dots, which are electron-containing structures, in the device. Quantum dots would not be useful for building the quantum computer. He also writes that Microsoft cherry-picked their data.
“You can’t make a qubit if you don’t have the Majoranas.”
Microsoft’s team published a rebuttal in Nature disputing Legg’s interpretation of their data. Legg’s critique “does not constitute a substantial scientific challenge to our findings,” the Microsoft team wrote. Legg has not “proposed an alternative model that fits all of our data,” Chetan Nayak, a physicist leading Microsoft’s quantum team, told The Verge.
Legg first posted his critique on the online physics repository arXiv on February 26, 2025, within a week of Microsoft’s Majorana 1 announcement. It took a year for Nature to conduct a peer review and publish his article.
Meanwhile, on June 2, Microsoft announced a new chip, the Majorana 2, featuring what they claimed was the next generation of their topological qubits. The company says they can build a “scalable quantum computer” by 2029. “We 100% stand behind our results,” Nayak told The Verge. “We stand by our roadmap. We stand behind our long-standing commitment to scientific rigor and dialogue.”
Legg says the company’s characterization of Majorana 2, which Microsoft wrote in a non-peer reviewed manuscript, suffers from similar problems he pointed out a year ago. “Nothing in this [manuscript] resolves the fundamental issues that so many scientists have with this company’s previous claims,” Legg told The Verge.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
NEWYou can now listen to Fox News articles!
Buying a phone without tying it directly to your identity could get much harder. The Federal Communications Commission (FCC) is considering tougher “know your customer” rules for voice providers.
The proposal would push phone companies to collect and keep more personal information before giving many new or renewing customers access to service. That could include your name, physical address, government-issued identification number and an alternate phone number.
The FCC says the goal is to make life harder for scammers, robocallers and criminals who abuse phone networks. That sounds reasonable at first. Nobody wants more fake bank calls, Medicare scam texts or urgent messages from crooks pretending to be family members. Yet this proposal raises a much bigger question. How much personal privacy should we give up to fight scam calls?
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
GOOGLE SEARCH LED TO A COSTLY SCAM CALL
The FCC is considering tougher phone identity checks that could require more personal information before service begins. (Kurt “CyberGuy” Knutsson)
What the FCC phone ID proposal would require
The FCC phone ID proposal focuses on identity checks for originating voice providers. Those are the companies that allow calls to enter the phone network. Right now, the FCC already expects providers to take steps to know their customers and stop illegal calls. The new proposal would make those duties more specific. The FCC is asking whether providers should be required to obtain and retain certain customer information before granting service. At a minimum, that could include:
- Name
- Physical address
- Government-issued identification number
- Alternate telephone number
The FCC is also asking how these rules should apply to “new and renewing” customers. That phrase is important. A narrow version could focus on people opening new accounts. A broader version could reach people who switch plans or renew service with a current provider. For high-volume customers, including some business and foreign customers, the FCC is also asking whether providers should collect more information. That could include the intended use of the service and the IP address used to place calls, when applicable.
The FCC is also asking whether providers should retain KYC records for four years after the customer relationship ends, tied to the statute of limitations for certain illegal calling violations.
Why the FCC wants stronger phone identity checks
The FCC says scammers hide behind phone calls and texts to rip people off, then disappear before anyone can track them down. Anyone with a phone knows this problem has gotten out of hand. Most of us now look at an unknown number and assume trouble before we even answer.
The agency believes tougher identity checks could make it harder for bad actors to get onto phone networks in the first place. It also says better customer records could help investigators connect the dots after a scam call or text causes harm.
Here is where the proposal gets bigger. The FCC also asks whether stronger records could help law enforcement investigate crimes that go beyond scam calls, including national security threats and abuse in text messaging networks. So while robocalls are the headline, this proposal reaches much further. It could move phone service closer to an identity-check model that goes well beyond robocalls.
Why burner phones could become harder to buy
The FCC proposal does not specifically say it will ban burner phones. Still, the practical impact could be significant. A burner phone usually refers to a prepaid phone or phone line with no clear identity link at the point of purchase. TV shows often connect burner phones with criminals. Real life is more complicated.
People use prepaid or private phone lines for plenty of lawful reasons. A domestic abuse survivor may need a safe phone that an abuser cannot easily trace through shared accounts. A journalist may need to protect a source. A whistleblower may need to call without exposing a personal number. Someone without a stable address may rely on prepaid service because it is easier to obtain.
If phone companies must collect a government ID number and physical address before service begins, anonymous or lightly identified prepaid service could become far harder to access. That is why privacy advocates see this as more than a robocall rule. They see it as a potential shift in how Americans get basic phone service.
HOW SCAMMERS BUILD A PROFILE ON YOU USING DATA BROKERS
Prepaid phones could face closer scrutiny if the FCC moves ahead with stricter “know your customer” rules. (Photographer: Brent Lewin/Bloomberg via Getty Images)
The FCC proposal could affect prepaid phone plans
Prepaid phones are a big part of this story. Some people use them to save money. Others use them because they want more control over what they spend or because a traditional phone plan creates hurdles they would rather avoid.
The FCC is now asking whether prepaid and postpaid customers should face different identity checks. That question is important because prepaid service has long been one of the easiest ways to get a working phone without a lengthy signup process.
A strict final rule could make prepaid service feel a lot more like opening a bank account. For some people, that may only mean another form to fill out. For others, especially someone trying to stay safe or keep a phone line private, it could be a much bigger deal.
The privacy risk behind a phone ID database
The most obvious concern is privacy. The quieter concern is cybersecurity. Phone companies already hold sensitive customer information. Adding government ID numbers, physical addresses and alternate phone numbers would make those records even more valuable to hackers.
If a telecom database gets breached, criminals may use stolen customer data for phishing, identity theft, SIM-swap attacks or stalking. A rule meant to stop scammers could create a richer target for scammers to steal. That to me is scary.
The FCC does ask how providers should protect customer information and how long records should be retained. Those are important questions. Still, better security rules would need real teeth. Sensitive data becomes a liability the moment it gets collected.
What “physical address” could mean for phone customers
The FCC is also asking whether P.O. boxes, shared office locations and similar addresses should count as a customer’s physical address. That detail could create real problems.
Some people do not have a traditional home address. Others may avoid sharing one because of safety concerns. A domestic abuse survivor may use a mailing address that keeps a home location private. A small business owner may use a shared office or mail service. If the final rule limits what counts as a valid address, some people could face a harder path to phone service. That may sound like a compliance detail. For someone trying to stay safe, it could matter a lot.
TOP 10 ROBOCALL HOT SPOTS IN AMERICA
Privacy advocates warn that stronger identity checks could make private phone access harder for people with legitimate safety concerns. (Kurt “CyberGuy” Knutsson)
What happens next with the FCC phone ID proposal
The FCC is taking public comments on the proposal through June 25, 2026. Reply comments are due July 27, 2026. After that, the agency can review feedback from phone companies, law enforcement, privacy groups, consumer advocates and the public.
The final rule could change. The FCC could narrow the requirements, add privacy safeguards, create exceptions or revise major parts of the proposal. For now, this is one to watch closely.
We reached out to the FCC for comment, but did not hear back before our deadline.
How to reduce scam calls and texts now
You do not need to wait for a new FCC rule to protect yourself.
1) Let unknown calls go to voicemail
Do not feel pressured to answer every unknown number. A real caller can leave a message. A scammer wants you on the line fast, before you have a chance to slow down and think.
2) Turn on phone spam protections
On iPhone, go to Settings, tap Apps, scroll down and tap Phone, then go to the unknown caller settings. Choose Silence to send calls from unsaved numbers to voicemail, or choose Ask Reason for Calling if you want unsaved callers to provide more information before your iPhone rings. You can also look under Call Filtering and toggle on Unknown Callers and Spam.
On many Samsung phones, open the Phone app, tap the three dots, tap Settings, tap Caller ID and spam protection and turn it on. Then, scroll down and make sure Block all spam and scam calls is toggled on. Settings may vary depending on your phone model.
3) Avoid links in unexpected texts
Go directly to the company’s app or website instead. That habit can help stop fake toll texts, bank scams and delivery alerts.
4) Reduce the personal info scammers can use against you
Scammers often sound convincing because they already know something about you. That information can come from people-search sites, data brokers, old breaches or public records. Consider using a data removal service to reduce how much of your personal information is floating around online. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
5) Block and report suspicious messages
Do not just delete scam texts. On iPhone, open Messages. If you have not opened the message, swipe left on it, tap the Delete button, then tap Delete and Report Spam. If you have already opened it, tap Report Spam at the bottom of the message, then tap Delete and Report Spam. To block the sender, open the conversation, tap the sender’s icon at the top, tap Info, scroll down and tap Block Contact. Apple says reporting spam does not block the sender. Settings and carrier support may vary.
On many Samsung Galaxy phones using Google Messages, open the message, tap the three dots and choose Block and report spam, if requested confirm your decision by tapping Yes. If you use Samsung Messages, touch and hold the conversation, tap More, then tap Block. Settings may vary depending on your phone model and messaging app.
6) Use antivirus software and a password manager
Strong antivirus software can help block phishing links and malicious websites before they cause damage. A password manager can also help you avoid reusing passwords if a scammer tricks you into entering login details on a fake page. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
7) Turn on account alerts
Turn on bank, credit card and phone carrier alerts so you know quickly if someone tries to make a charge, move money or change your account. Fast alerts can help you stop damage before it spreads.
Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes
Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here: CyberGuyLive.com
Kurt’s key takeaways
The FCC wants to stop scammers before they ever get onto the phone network. I get that. Scam calls and texts are out of control, and they have cost too many people real money. At the same time, the way the FCC is looking at this raises a real privacy concern. Asking phone companies to collect a government ID number, physical address and alternate phone number could change what it takes to get basic phone service in America. The FCC believes stronger customer records could help investigators track scammers after illegal calls happen. The question is whether scammers would still find ways around the rules while people with legitimate privacy needs face new hurdles. A domestic abuse survivor, journalist, whistleblower or person without a stable address may have a much harder time getting a private phone line. That is why any scam-fighting plan needs strong privacy safeguards. Before asking phone customers to hand over more personal information, the FCC should show how this data would reduce scams and how it would be protected.
Would you give your phone carrier a government ID number and physical address if it meant fewer scam calls, or does that go too far? Let us know by writing to us at CyberGuy.com.Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
-
News19 minutes ago
Federal judge halts Trump’s election executive order seeking to create a federal voter list
-
Los Angeles, Ca2 hours agoBoyle Heights warehouse cleanup begins as crews face 85 million pounds of spoiled food
-
Detroit, MI2 hours agoWould Detroit Lions Salary Cap Be Wrecked If Terrion Arnold Gets Cut?
-
San Francisco, CA2 hours agoTwo more Presidio Heights homes reach $10M range as luxury supply dwindles
-
Dallas, TX2 hours agoOne Dallas Cowboys Contract That Will Age Poorly in 2026
-
Miami, FL2 hours agoLive updates: Today’s South Florida News
-
Boston, MA2 hours agoA federal judge in Boston has blocked parts of Trump’s order to limit voting by mail
-
Denver, CO2 hours agoDenver Transplant Games sets Guinness World Record for most living donors, recipients in one place at one time
