CypherLoc Scareware Targets Users with Fake Microsoft Support Scams

A new scareware kit named CypherLoc is being used by hackers to lock victims' browsers and direct them to fraudulent Microsoft support lines. This browser-locking scareware has been linked to approximately 2.8 million attacks since the beginning of 2026. CypherLoc operates in an encrypted manner, making it difficult for traditional security tools to detect. Security experts emphasize the need for robust anti-phishing and endpoint protections, as well as user education to combat this threat. The kit represents a significant escalation in browser-based attacks, posing risks to a wide range of internet users. Organizations are advised to implement stronger security measures to mitigate the impact of such threats.

Key Points: • CypherLoc scareware has been linked to 2.8 million attacks in 2026. • The kit locks browsers and tricks users into calling fake tech support. • Robust anti-phishing measures and user education are critical for defense.