CypherLoc Scareware Has Targeted Millions of Users (infosecurity-magazine.com)

• Approximately 2.8 million attacks since January 2026.
• Scareware activates only under specific conditions (URL fragment, integrity checks).
• Recommendations: anti-phishing, browser/endpoint protection, user education.

"Barracuda researchers report that the CypherLoc scareware has been used in approximately 2.8 million attacks since the start of 2026. The malware is delivered via phishing emails and activates only under specific conditions to evade security tools. It forces the browser into full-screen mode, hides menus, and displays fake security warnings to pressure victims into calling fraudulent tech support. Barracuda recommends anti-phishing, browser and endpoint protections, and user education."