Malwarebytes launched Scam Link Check, a free web tool that rates any pasted URL as safe, dangerous or unknown before anyone clicks it. Security teams now have a no-login first stop to name in scam guidance for customers and for staff holding a suspect link.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+20
- Incentives70
- Confidence55
The OAuth device authorization grant was built for smart TVs and printers. Kits such as EvilTokens use it to get victims to approve an attacker's sign-in on a page that really is Microsoft's, MFA included.
Reality
- Evidence55
- Adoption20
- Hype gap+12
- Incentives70
- Confidence55
A phishing email impersonating Belgium's bpost asks for EUR4.95 in unpaid customs duty. Malwarebytes says the pages behind the demand are built to harvest bank and card credentials, and the fee is the pretext.
Reality
- Evidence55
- Adoption30
- Hype gap+12
- Incentives65
- Confidence50
Malwarebytes has tracked the rewards-expiry smishing since early May 2026 and counted more than 1,000 template variants pointing at hostnames built as t-mobile plus six random letters under .top.
Reality
- Evidence55
- Adoption45
- Hype gap+12
- Incentives75
- Confidence58
The callback number in the fake listing had already been used in scams impersonating McAfee and Norton. That makes the phone line the operator's durable asset, and the hosting platform is just an interchangeable front.
Reality
- Evidence32
- Adoption34
- Hype gap+22
- Incentives78
- Confidence45