Skip to content

Project

Malwarebytes Scam Guard

Scam Guard is a Malwarebytes tool that scans links, texts, and screenshots to flag scams, available on mobile, desktop, and major AI chatbots.

Known aliases

  • Scam Guard

Current stories

securityOne report1 publisher

Fake Facebook Marketplace listings name the target as seller to bait a reply

Scammers text people a fake Facebook Marketplace listing naming them as seller to provoke a 'that isn't me' reply, Malwarebytes reports. Any answer tells a sender who likely already has the name and number that the line is live.

Publishers:malwarebytes.com

Reality

Evidence35
Adoption
Not scored
Hype gap+20
Incentives60
Confidence40
securityOne report1 publisher

Device code phishing collects tokens from a sign-in page that is genuinely Microsoft's

The OAuth device authorization grant was built for smart TVs and printers. Kits such as EvilTokens use it to get victims to approve an attacker's sign-in on a page that really is Microsoft's, MFA included.

Publishers:malwarebytes.com

Reality

Evidence55
Adoption20
Hype gap+12
Incentives70
Confidence55
securityOne report1 publisher

Fake bpost customs email escalates a EUR4.95 duty into a request for card and bank details

A phishing email impersonating Belgium's bpost asks for EUR4.95 in unpaid customs duty. Malwarebytes says the pages behind the demand are built to harvest bank and card credentials, and the fee is the pretext.

Publishers:malwarebytes.com

Reality

Evidence55
Adoption30
Hype gap+12
Incentives65
Confidence50
securityOne report1 publisher

Fake T-Mobile points-expiry texts rotated through at least 81 .top domains in four months

Malwarebytes has tracked the rewards-expiry smishing since early May 2026 and counted more than 1,000 template variants pointing at hostnames built as t-mobile plus six random letters under .top.

Publishers:malwarebytes.com

Reality

Evidence55
Adoption45
Hype gap+12
Incentives75
Confidence58
securityOne report1 publisher

Scammers rented BuzzFeed's reputation to impersonate Malwarebytes support

The callback number in the fake listing had already been used in scams impersonating McAfee and Norton. That makes the phone line the operator's durable asset, and the hosting platform is just an interchangeable front.

Publishers:malwarebytes.com

Reality

Evidence32
Adoption34
Hype gap+22
Incentives78
Confidence45