Fake xStocks, Pendle, and other sites bait crypto users with rewards votes

Malwarebytes Labs RSS document listing security news from late September to early October 2026, including crypto wallet-draining scams, phishing campaigns, data breaches, mobile and Apple exploitation, malware using Tailscale for command-and-control evasion, ClickFix social engineering, and AI-related security and privacy risks. The most directly actionable items involve fake crypto reward sites, DarkSword attacks against vulnerable iPhones, Kothamine malware, and PowerShell-based ClickFix traps.