Fake xStocks, Pendle, and other sites bait crypto users with rewards votes

Malwarebytes Labs reporting covering cryptocurrency wallet-draining scams, AI and data privacy risks, major data breaches, Apple and browser vulnerabilities, malware using legitimate tunneling tools for command and control, and ClickFix social-engineering campaigns. The most direct active-threat reports involve fake crypto reward-voting sites that prompt wallet connections, DarkSword attacks delivered through a fake iPhone preorder page, Kothamine malware using Tailscale tailcat for encrypted command and control, and fake verification pages that instruct users to execute PowerShell commands.