Category archive
Scam alerts
Track the latest scam alerts, fake support incidents, delivery fraud, payment scams and rapid verification guidance in one archive.
This landing page groups scam alerts into one indexable archive so users and Google can navigate the incident stream by topic instead of only by date, with stronger internal links into the right tools and recovery paths.
Filter the alert archive
Narrow the archive by category and risk level to review phishing alerts, data breach alerts, malware coverage, vulnerability updates and ransomware incidents faster.
Full alert archive
Showing 12 of 241 matching alerts.
Each alert card surfaces the threat type, documented summary and best next step so the listing itself can answer intent around latest cybersecurity alerts, phishing alerts, breach alerts and incident response without forcing every visitor to click through immediately.
Older alerts from 2021-2025 are still available, but stronger, documented and more recent reporting is ranked first so the archive stays aligned with current Google quality expectations.
12 Malicious Browser Extensions Posing as TikTok Video Downloaders Compromise Over 130,000 Users Worldwide
Human review: Marcin Pocztowski | Source date: Apr 21, 2026 | Sources: 2A sophisticated malware campaign dubbed 'StealTok' has compromised more than 130,000 users through a network of 12 browser extensions masquerading as TikTok video down... Verified across 2 sources. Focus: lure pattern, spoofing signals and account-protection next steps.
Best next step: Identity Theft Recovery Planner
Former Ransomware Negotiator Pleads Guilty to Collaborating with BlackCat Cybercrime Gang
Human review: Marcin Pocztowski | Source date: Apr 22, 2026 | Sources: 7A former ransomware negotiator has admitted to working with the notorious BlackCat ransomware group, exploiting insider knowledge to facilitate cyberattacks. This reve... Verified across 7 sources. Focus: exposed data, who may be affected and breach-response priorities.
Best next step: Identity Theft Recovery Planner
Dual-Payload Malware Campaign Deploys Gh0st RAT and CloverPlus Adware Simultaneously
Human review: Artur Ślesik | Source date: Apr 20, 2026 | Sources: 7A sophisticated malware campaign has been uncovered that uses a single obfuscated loader to deliver both Gh0st RAT and CloverPlus adware onto victim systems. This dual... Verified across 7 sources. Focus: lure pattern, spoofing signals and account-protection next steps.
Best next step: Identity Theft Recovery Planner
ShinyHunters Group Takes Credit for Massive Data Breach at EdTech Firm Instructure
Human review: Artur Ślesik | Source date: May 04, 2026 | Sources: 4The hacker collective ShinyHunters has claimed responsibility for a significant breach at Instructure, an education technology provider, exposing 3.65 terabytes of sen... Verified across 4 sources. Focus: exposed data, who may be affected and breach-response priorities.
Best next step: Identity Theft Recovery Planner
Vidar Infostealer 2026 Variant Spreads via Fake CAPTCHAs Embedded in JPEG and TXT Files
Human review: Artur Ślesik | Source date: Apr 27, 2026 | Sources: 6The Vidar infostealer malware has reemerged in 2026 with sophisticated evasion methods, spreading through deceptive fake CAPTCHA prompts embedded within JPEG and TXT f... Verified across 6 sources. Focus: lure pattern, spoofing signals and account-protection next steps.
Best next step: Crypto Scam Checker for Fake Investments and Recovery Fraud
Critical Vulnerabilities in Fullstep V5 Expose User Data and API Tokens
Human review: Marcin Pocztowski | Source date: Apr 20, 2026 | Sources: 1Two critical security flaws, CVE-2026-5749 and CVE-2026-5750, have been identified in Fullstep version 5, impacting the registration process and allowing unauthorized... Documented alert summary. Focus: affected products, exploit urgency and remediation guidance.
Best next step: Crypto Scam Checker for Fake Investments and Recovery Fraud
Vercel Data Breach Linked to Context.ai: ShinyHunters Denies Involvement Amid $2M Data Sale
Human review: Artur Ślesik | Source date: Apr 20, 2026 | Sources: 3Vercel, a leading cloud platform for frontend developers, has confirmed a significant data breach linked to Context.ai, with hackers attempting to sell stolen data for... Verified across 3 sources. Focus: lure pattern, spoofing signals and account-protection next steps.
Best next step: Identity Theft Recovery Planner
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms and 25+ Emerging Cyber Threats in 2026
Human review: Artur Ślesik | Source date: Apr 23, 2026 | Sources: 1In this comprehensive ThreatsDay Bulletin, we dissect a massive $290 million DeFi hack, sophisticated macOS Living-off-the-Land (LotL) abuse campaigns, and the rise of... Documented alert summary. Focus: extortion context, containment timing and recovery options.
Best next step: Crypto Scam Checker for Fake Investments and Recovery Fraud
Critical Phishing And Account Takeover Wave Warsaw 1776427305: confirmed facts, exposure and response steps
Human review: Artur Ślesik | Source date: Mar 21, 2021 | Sources: 4org). Review the confirmed facts, likely exposure path, immediate response steps and defender actions before the incident spreads. This upgraded HackWatch briefing con... Verified across 4 sources. Focus: lure pattern, spoofing signals and account-protection next steps.
Best next step: Crypto Scam Checker for Fake Investments and Recovery Fraud
How AI is Accelerating Nation-State Cyber Programs and What It Means for Global Security
Human review: Artur Ślesik | Source date: Apr 24, 2026 | Sources: 2Nation-state cyber programs have evolved into sophisticated, AI-accelerated operations integral to state power, blending military, economic, and diplomatic strategies.... Verified across 2 sources. Focus: extortion context, containment timing and recovery options.
Best next step: Identity Theft Recovery Planner
Phishing, Often Powered by AI, Leads Initial Access Attempts in Q1 2026, Cisco Reports
Human review: Artur Ślesik | Source date: Apr 22, 2026 | Sources: 2In Q1 2026, phishing attacks—frequently enhanced with AI-generated fake login pages—surpassed all other initial access methods, according to Cisco’s cybersecurity anal... Verified across 2 sources. Focus: lure pattern, spoofing signals and account-protection next steps.
Best next step: Identity Theft Recovery Planner
500,000 Vulnerabilities, 14 That Matter: How Exploit Chain Analysis Cuts Through the Noise
Human review: Marcin Pocztowski | Source date: Apr 21, 2026 | Sources: 2In an era where enterprises face an overwhelming volume of vulnerability data, exploit chain analysis emerges as a critical method to identify truly exploitable threat... Verified across 2 sources. Focus: lure pattern, spoofing signals and account-protection next steps.
Best next step: Identity Theft Recovery Planner
Alerts archive SEO topics
Archive maintenance and remediation tracking. HackWatch does not treat alerts as one-time posts. We continue checking whether vendors have issued patches, workarounds or final remediation updates, then refresh the article with the latest incident status so readers can see whether a threat is still active, mitigated or already resolved.