Scammers leave AI fingerprints all over fake antivirus renewal page
Malwarebytes found an AI-built fake Avast renewal page in Belgium whose contractor-style code comments show scammers now generate polished pages with AI.
42
- Mentions · 7d0
- Mentions · 30d0
- All mentions13
- First seenSep 1, 2026
- Last mentionedSep 17, 2026
Timeline
13 articles · newest firstIranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists
UK NCSC, FBI and Dutch AIVD warn Iranian state hackers deploy CHOSEN BRICK spyware via WhatsApp and Telegram lures against dissidents and journalists since 2025.
78
AI helps scammers build convincing antivirus renewal pages
Malwarebytes found scammers using AI to build polished fake antivirus renewal pages impersonating Avast, harvesting names, emails and phone numbers for follow-up fraud calls.
35
Serial Microsoft 0-day hunter drops yet another Defender exploit
Researcher Nightmare Eclipse released ShieldCrash, a Microsoft Defender zero-day PoC that bypasses September patches and reads files as SYSTEM.
55
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Researcher Chaotic Eclipse released FalconFlank, a PoC zero-day privilege escalation exploit against CrowdStrike Falcon's Microsoft Office macro removal feature.
72
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day
Researcher Chaotic Eclipse released ShieldCrash, a PoC showing Microsoft Defender's CVE-2026-69414 patch is incomplete, enabling arbitrary file reads as SYSTEM.
72
The 12 Best Antivirus Software for Mac, Compared and Priced
GBHackers ranks 12 Mac antivirus products, naming Bitdefender best overall and noting Gen Digital owns Norton, Avast, and Avira.
15
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
Researcher Chaotic Eclipse released a PoC showing CVE-2026-69414's patch is bypassable, allowing arbitrary file reads as SYSTEM on current Windows.
45
Chaotic Eclipse Released GreenSection, A PoC For NVIDIA Memory Corruption Zero-Day
Researcher Chaotic Eclipse released GreenSection, a PoC exploiting an unpatched out-of-bounds write in NVIDIA Windows user-mode shared memory.
52
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
Researcher Nightmare Eclipse released working zero-day PoCs for Avast, CrowdStrike Falcon, and Nvidia, prompting a Gen patch, CrowdStrike mitigation, and Nvidia investigation.
62
Researcher Publishes CrowdStrike Privilege Escalation Zero Day
Researcher NightmareEclipse published FalconFlank, a zero-day local privilege escalation in CrowdStrike Falcon Sensor abusing its Office malicious macro remediation feature.
62
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
Researcher Chaotic Eclipse released FalconFlank, a zero-day privilege escalation PoC abusing CrowdStrike Falcon's Office macro remediation; CrowdStrike is investigating and issued a tech alert.
58
Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague
Researcher Chaotic Eclipse released PrettyPrague, a PoC zero-day privilege escalation exploit against fully patched GenDigital Avast Antivirus.
68
Related CVEs
by mentions- CVE-2026-694141%7.8Local Elevation of Privilege in Microsoft Defender Malware Protection Engine
- CVE-2026-5065611%7.0Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet "
Appears with
- Microsoftvendor · 9
- Kasperskyvendor · 9
- CrowdStrikevendor · 8
- Nvidiavendor · 5
- Microsoft Defenderproduct · 5
- Avast Antivirusproduct · 4
- Windows 11product · 4
- Gen Digitalvendor · 4
- CrowdStrike Falconproduct · 4
- CrowdStrike Falcon Sensorproduct · 3
- Malwarebytesvendor · 3
- Kaspersky Endpoint Securityproduct · 2
- Chaotic Eclipseorganization · 2
- AVGproduct · 2
- GenDigitalvendor · 2
- Avast Premium Securityproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.