苹果现在使用iPhone提醒来针对雇佣兵式间谍软件的目标。
苹果有扩展版 其针对雇佣间谍软件. 苹果现在会在iPhone的锁屏和设置中直接显示警告，当它认为设备所有者被雇佣间谍软件针对时。新的设备端提醒旨在让高风险警告更难被忽视，并配合电子邮件和用户苹果账户页面的通知。 在解释中，苹果表示： “苹果威胁通知是高信心度的警报，表明用户已被雇佣兵间谍软件单独针对，应当非常重视。” “苹果威胁通知 苹果检测到针对你的iPhone的雇佣兵间谍软件攻击。你现在可...
评论
点赞
收藏WhatsApp测试新诈骗消息警告功能
Meta正在WhatsApp上测试Scam Alert功能，利用设备端机器学习模型标记来自非联系人的可疑诈骗消息。该功能不会自动拦截，仅显示警告横幅让用户自行判断。主要局限是无法检测来自被盗联系人账号的诈骗消息。目前处于有限测试阶段。 
New Android malware lets criminals use your bank card in real time
Researchers at Group-IB have discovered a new NFC relay malware family, purpose-built to capture live card data via NFC and forward it in real time to attackers. They dubbed it “WindRelay.” NFC (Near ...
家长起诉Meta、TikTok、Google和Snap：3,000起青少年安全诉讼获关键胜利
第九巡回上诉法院裁定Section 230不能阻止青少年安全诉讼进入法庭，Meta、TikTok、Google和Snap约3,000起诉讼得以推进。新墨西哥州刚判Meta赔偿9.42亿美元，认定其平台设计构成公共妨害。纽约大学和东北大学测试86项青少年安全功能，51项失败——Snapchat失败率73%，Instagram 66%。内部文件显示Meta员工自称"pushers"，扎克伯格2016年邮件称提醒家长会"毁掉产品"。
“Zoomsday” flaws could let one Zoom participant attack another
Researchers have found three vulnerabilities in the popular Zoom meeting platform that could let one meeting participant attack another through malicious collaboration data. The vulnerabilities, track...
Patch Tuesday: Update now to fix 421 flaws, including three zero-days
Microsoft’s August 2026 Patch Tuesday addresses 421 Microsoft vulnerabilities, including 62 rated Critical. One Windows vulnerability has been exploited in the wild by the Lazarus group to gain SYSTEM... 
假冒CCleaner安装GhostDesk Chrome间谍软件
假冒CCleaner安装包通过伪造下载页面分发GhostDesk Chrome扩展，窃取凭据、记录键盘输入、劫持剪贴板替换加密货币地址。攻击者利用CScript加载器进行多阶段感染，修补Chrome安全扩展manifest.json建立C2通道。 
Valve 警告 Steam 硬件买家：警惕伪造配送诈骗
Valve 的物流合作伙伴 CEVA Logistics 在 2026 年 7 月 29 日至 8 月 1 日遭黑客攻击，欧洲 Steam 硬件买家（Steam Deck、Steam Controller 等）的姓名、地址、电话和订单详情被泄露。Valve 建议所有收到提及近期硬件订单的邮件、短信或电话一律视为诈骗，Steam Support 不会通过这些渠道联系用户。密码和支付信息未受影响。 
社交媒体平台打击无人机工厂招聘游戏
俄罗斯阿拉布加特区无人机工厂通过免费游戏《Drone Battle: Ukraine》和社交媒体网红，向全球年轻人招募无人机装配工人。游戏以俄军与北约冲突为背景，实则是招聘漏斗的入口，通过奖学金、培训、免费旅行等诱饵结合网红推荐和渐进式承诺，让玩家逐步进入招聘流程。YouTube、Meta、TikTok已删除约600个相关视频，但活动仍在X和Telegram上持续。
Sexual predators targeting online accounts for intimate images, FBI warns
The FBI has issued a Public Service Announcement (PSA) warning that criminals are breaking into social media and personal accounts to steal and distribute intimate images and videos without consent. T...
Love/hate relationship: The AI affair. Young people love AI, but it’s breaking their trust
Young people use AI for everything. From schoolwork to interview prep, relationship advice to shopping decisions, the technology has become part of how young people live. For the most digitally fluent... 
Watch out for fake TikTok Shops trying to steal your money
TikTok Shop is a real, functioning e-commerce feature built into the TikTok app, allowing users to buy goods without ever leaving TikTok. As it’s grown in popularity, scammers have begun cloning its a... 
Fake popular sites offer a free app, instead take over PCs
A website built to look almost exactly like CNN’s homepage is telling visitors to download “the new CNN app.” But it’s not CNN’s app, and has nothing to do with the news company. The campaign doesn’t ... 
如何伪造数据轨迹（并可能降低价格）
公司通过收集消费者数据对不同人展示不同价格。2012年Orbitz对Mac用户酒店报价高出30%，Princeton Review按邮编对亚裔报价比非亚裔高近一倍。视频记者Chris Parr注册怀俄明州LLC、雇佣演员扮演真实用户，用无人机携带手机在富人区上空飞行，测试能否绕过地理定价。
新式"一键诈骗"工具包让任何人都能轻松成为骗子
网络安全公司Malwarebytes发现黑市上有人出售名为xrep的诈骗工具包，售价500美元，提供完整的加密货币诈骗基础设施。以$TSLA代币预售网站为例，工具包包含钓鱼页面（骗取12词助记词）、虚假投资面板、受害者追踪和管理后台，让毫无技术背景的人也能快速开展诈骗。 
Edge开始淘汰旧版扩展，隐私工具首当其冲
微软Edge本月开始淘汰Manifest V2扩展，消费者端预计2026年底完成，企业端2027年初。95%常用MV2扩展已迁移至MV3，58个有实际使用量的MV2扩展中仅3个没有公开的MV3替代方案。uBlock Origin等知名隐私工具受影响，MV3的规则数量限制（静态规则上限3万条等）削弱了部分高级隐私扩展的能力。
一周安全资讯（8月3日–9日）
Malwarebytes 每周安全新闻汇总，涵盖 AI 聊天机器人入侵英雄联盟好友请求、Meta 因伤害儿童被责令赔偿 9.42 亿美元、Apple WebKit 漏洞可绕过 Private Relay 暴露 IP、Anthropic Mythos AI 被用于社会工程学攻击、Google 同步 passkeys 存在被盗风险等本周安全事件。
AI chat bots are sliding into League of Legends friend requests
Lina K., a co-worker, recently shared a firsthand account of how bots are adding League of Legends players via the Riot client friends list immediately after a match ends, striking up a flirty convers... 
Meta ordered to pay $942 million over harm to children
A New Mexico court has ordered Meta to pay a total of $942 million after finding that Facebook and Instagram harmed young users and that the company misled consumers about the safety of its platforms.... 
Apple WebKit vulnerabilities reveal your IP address, despite Private Relay
Three WebKit mechanisms have been discovered to bypass Apple’s iCloud Private Relay. In fact, the mechanisms can bypass any browser‑level proxy configuration, including Psylo’s proxy, Tor-on-iOS proxy...
Scammers target OnlyFans users with deepfakes
OnlyFans creators are used to posting adult videos of themselves online, but what happens if someone takes control of their images and uses them for fraud? This week, USA Today revealed how criminals ...
Amazon and Apple impersonated in “$149.99 unauthorized charge” scam
If you’ve spent any time browsing lately, you may have run into a full-screen popup warning you that your Apple ID or Amazon account was just used for a mysterious $149.99 purchase. It looks urgent. I... 