Fake xStocks, Pendle, and other sites bait crypto users with rewards votes

Malwarebytes Labs feed covering recent cybersecurity and privacy reporting, including crypto wallet-draining scams, data breaches, Apple exploitation, malware using Tailscale for encrypted command-and-control, ClickFix PowerShell lures, AI security and privacy risks, and consumer fraud. The most directly actionable threats include fake crypto reward-voting sites that induce wallet connections, DarkSword exploitation through a fake iPhone preorder page, Kothamine malware abusing Tailscale’s tailcat to evade network detection, and ClickFix campaigns coercing users into executing PowerShell.