Corporate Communications Intern

Read about the company’s commitment to the communities we live in.

Sr. Manager, CR and Environment

Community

We work with education partners all over the world to help students build strong, lasting digital safety habits. And we equip teachers with tools and resources that make those digital skills part of everyday learning in their school curriculums, not a one-off lesson.&nbsp;&nbsp;Since 2021, more than 42,300 students across 200 schools have taken part in Cyber Safety training through a collaboration between Norton, part of the Gen family of brands, and Bal Raksha Bharat (Save the Children – India).&nbsp;&nbsp;The focus is practical: helping young people recognize online risks and build habits that keep them safer—from spotting scams to protecting their personal information. And by bringing teachers and families into the learning process, the program ensures those behaviors don’t stop at the classroom door.&nbsp;

<h2>How it works&nbsp;</h2>We start early and keep it relevant. Students ages 10-16 learn practical Cyber Safety skills through age-based lessons covering topics like scams, phishing and online privacy. Many schools also run Cyber Safety Clubs to keep those habits going beyond the classroom.&nbsp;&nbsp;Teachers are trained alongside students with tools they can use every day — not just once.&nbsp;And the learning doesn’t stop at school. Workshops bring in parents, caregivers, School Management Committees and even local law enforcement, so the same messages show up at school, at home and in the community.&nbsp;Between April 2025 and March 2026 alone, these sessions reached more than 9,400 people, including nearly 7,800 students and more than 1,700 caregivers.&nbsp;<h2>The results are in. The impact is clear. &nbsp;</h2><ul type="disc"><li data-list-item-id="e50336e8fde80f2a8f28a0d021f201cb1">99.5% of students surveyed showed improved digital safety knowledge&nbsp;</li><li data-list-item-id="e728025570a6c3d168ca5e928feab5a43">Students scoring 70% or higher on the Cyber Safety assessment increased from 5% before the session to 91% afterwards&nbsp;</li><li data-list-item-id="e3ea6261ccdf7b675e38313b9e0410513">96% of parents said the training helped them guide their children&nbsp;&nbsp;&nbsp;</li><li data-list-item-id="e4bc2abde24be47a263d698de4f102fee">91% of teachers saw positive changes in digital behavior, like stronger passwords and scam awareness&nbsp;&nbsp;</li></ul>These results come from a sample of schools in Pune, Maharashtra and Thiruvallur, Tamil Nadu that have been running the program for at least a year. &nbsp;

<h2>Why this approach matters&nbsp;</h2>This work in India is part of something bigger.&nbsp;Across the globe, Gen is helping expand access to digital education that is locally relevant, scalable and built to last—so more people can navigate the digital world with confidence.&nbsp;We’re building on this through partnerships with Discovery Education on <a href="https://www.gendigital.com/blog/impact/community/discovery-education-ai-curriculum" target="_blank" rel="noreferrer noopener">AI literacy</a> and our <a href="https://www.gendigital.com/blog/impact/community/financial-literacy-month-2026" target="_blank" rel="noreferrer noopener">financial wellness efforts</a> with the Jump$tart Coalition and the National Consumers League.&nbsp;&nbsp;

How our partnership with Save the Children India builds safer digital habits

Expanding Digital Education for Students in India

Corporate Manager

Phishing scams are more convincing. AI is making fake messages harder to spot. And once attackers get into one account, they often don’t stop there. They move laterally – email, banking, shopping, even identity data — turning a single mistake into something much bigger.That’s how account takeovers become&nbsp;identity theft.And the signals people used to rely on? They’re fading fast.As James E. Lee, President of the Identity Theft Resource Center (ITRC), explains: “Remember when we used to tell people bad spelling and poor grammar were the best way to tell if someone was trying to scam you or steal your identity? AI-assisted attacks now make it easy to convince people a scam is real, compromising or bypassing passwords along the way. That’s why we all need to change our habits to include a multi-layer approach to protecting our personal information, starting with passkeys where available, and long, unique passwords created by a password manager + MFA when passkeys are not available.”The good news: protecting yourself doesn’t require expert-level skills. It requires a smarter, layered approach to how you log in; one that makes life harder for attackers, not for you. The new reality: passwords alone aren’t enoughPasswords are still everywhere. But on their own, they’re no longer strong enough to stand up to modern threats like phishing, credential stuffing, and data breaches.Today, the most effective defense is layered:<ul type="disc"><li data-list-item-id="ebe7fef585caa31819c6accdda95c3775">Strong, unique passphrases&nbsp;</li><li data-list-item-id="e29bc7f2b2042241054279627351da17d">A password manager&nbsp;</li><li data-list-item-id="e92657b16dd661843074c9f463fa52be1">Multi-factor authentication (MFA)&nbsp;</li><li data-list-item-id="e6ef7fd2c3211fd022bd5c30000356466">Authenticator apps&nbsp;</li><li data-list-item-id="e99b977e01d337356e97b88ed370094ea">Passkeys&nbsp;</li></ul>Each layer adds friction for attackers and resilience for you.<h2>Start with stronger passwords or passphrases</h2>Short, complex passwords are fading out. Long, unique&nbsp;passphrases are in.A passphrase (something like a string of unrelated words) is:<ul type="disc"><li data-list-item-id="e286a4823c6a31ced6d37539a0ef92c7a">harder to crack&nbsp;</li><li data-list-item-id="e51ada4f98556fc6e4edfd506d5b0811e">easier to remember&nbsp;</li><li data-list-item-id="e10a8c3ae3ceb601bfe4d90320037d1d7">more resistant to brute-force attacks&nbsp;</li></ul>Aim for at least&nbsp;12–15 characters and never reuse credentials across accounts.Why? Because password reuse is one of the fastest paths to identity theft. One breached account can unlock many more—especially email, which acts as a gateway to everything else.

<h2>A password manager makes strong security a reality</h2>Here’s the truth: no one can securely manage dozens of unique passwords on their own.That’s where a password manager comes in. A tool like&nbsp;<a href="https://my.norton.com/extspa/passwordmanager" target="_blank">Norton Password Manager</a> helps you:<ul type="disc"><li data-list-item-id="e93d3e2f5a1f3d684b90b6064c19fbb2a">generate strong, unique passwords&nbsp;</li><li data-list-item-id="e280b796fe7b27859a3108336caf07c71">store them securely&nbsp;</li><li data-list-item-id="e695229e2672c6f45484d8ff402915c28">autofill them across devices&nbsp;</li></ul>👉 Instead of reusing passwords or writing them down, you create a system that scales safely.And that matters because better password habits are one of the most effective ways to prevent account takeovers before they start.<h2>MFA: the simplest upgrade with the biggest impact</h2>Even strong passwords can be stolen through phishing, malware or breaches.That’s why&nbsp;multi-factor authentication (MFA) is critical.MFA requires a second form of verification:<ul type="disc"><li data-list-item-id="e70545fda0a315f0787bd5c2d97b9297e">something you know (password)&nbsp;</li><li data-list-item-id="e9c798773de7ff0641db0b83bf87b026b">something you have (device or app)&nbsp;</li><li data-list-item-id="e5b11b8077468b93b11b9eea30a434e3e">something you are (biometrics)&nbsp;</li></ul>So even if an attacker gets your password, they still hit a wall.Think of it this way: A password locks the door. MFA adds a deadbolt.<h2>Authenticator apps &gt; SMS (and here’s why)</h2>Many people rely on text message codes for MFA. It’s better than nothing—but it’s not the strongest option.Authenticator apps are more secure because:<ul type="disc"><li data-list-item-id="e1becac39799082e5fee0a8f2c7adba0b">codes are generated on your device&nbsp;</li><li data-list-item-id="eea63cb614fe3a9dfbb519f6a3e81937a">they aren’t transmitted over networks&nbsp;</li><li data-list-item-id="ee5f9827b24141bed1f6ec8e7c1acc7c4">they’re less vulnerable to SIM-swap attacks&nbsp;</li></ul>They also strike the right balance: strong security, minimal friction.<h2>Passkeys: a simpler, phishing-resistant future</h2>Passkeys are gaining traction for a reason. They remove the password entirely.Instead of typing anything, you log in using:<ul type="disc"><li data-list-item-id="e9dcf2622584197e5cb16fda3f11ef6ac">fingerprint&nbsp;</li><li data-list-item-id="ea7d11d74d81497a4acd16e7c6c29d6cd">face scan&nbsp;</li><li data-list-item-id="e0426ea4a37edded97d0c20340c5f78d6">device PIN&nbsp;</li></ul>Behind the scenes, passkeys use&nbsp;public key cryptography, which means:<ul type="disc"><li data-list-item-id="e58dcc6362b3c8cd82d1651546d8ed350">no shared secrets to steal&nbsp;</li><li data-list-item-id="e192dbdc4720550b21d96ceefc468888e">no passwords to phish&nbsp;</li><li data-list-item-id="e6ac56d7e9a1e70491553d822f360e9dd">no risk of entering credentials into fake sites&nbsp;</li></ul>They’re designed to be&nbsp;phishing-resistant by default.Passkeys aren’t universal yet, but where they’re available, they’re one of the strongest upgrades you can make.<h2>How account takeovers turn into identity theft</h2>This is where it gets real.When attackers access an account, they don’t just stop there. They:<ul type="disc"><li data-list-item-id="e64049057c95e55d1542faa1c6cae8b82">reset passwords&nbsp;</li><li data-list-item-id="e102a5f8ec88ebe93219c8c025126d42f">scrape personal data&nbsp;</li><li data-list-item-id="e91eff0019645f2083dfcbf411937ac9d">impersonate you&nbsp;</li><li data-list-item-id="efb44ea2fdf24f5e2381c8e5acae6b8e3">pivot into financial or identity systems&nbsp;</li></ul>That’s how a compromised login becomes&nbsp;identity theft.According to the&nbsp;<a href="https://www.idtheftcenter.org/" target="_blank">Identity Theft Resource Center</a> (ITRC), stolen credentials are one of the most common starting points for identity-related crimes. The <a href="https://identitytheft.gov/" target="_blank">U.S. Federal Trade Commission</a> also notes that identity theft often begins with exposed login information.In other words, protecting your accounts is one of the most effective ways to protect your identity.<h2>Security doesn’t stop at login</h2>Getting into your accounts safely is step one. What happens after matters too.<ul type="disc"><li data-list-item-id="eeca421063d947af9513ba3520e0d9e44">Use secure apps with end-to-end encryption&nbsp;</li><li data-list-item-id="e57922da03ac9c2b8ad3b098c22ed9eac">Be cautious about what you share and store&nbsp;</li><li data-list-item-id="ed0891d3c1de4af26b749c0b569485d3c">Keep devices updated&nbsp;</li></ul>Good digital habits don’t end at login; they extend across everything you do online.<h2>What to do now (start here)</h2>Focus on your most important accounts:<ul type="disc"><li data-list-item-id="e0d7d0c8f79bf63ec1dc9855b30165df3">email&nbsp;</li><li data-list-item-id="e308b155522a2f37f61aa2deaabfb01b3">banking&nbsp;</li><li data-list-item-id="e26ce5f8a4c9ff8a30dfc73dd89eea960">shopping&nbsp;</li><li data-list-item-id="e2324f3fed7f0dcdafb1af0c2ee15ca9b">social media&nbsp;</li></ul>Then:<ul type="disc"><li data-list-item-id="e6f69f3a8b0b344d52b8219fb40b2ab09">Create long, unique passphrases&nbsp;</li><li data-list-item-id="e881ebfa1d05420bf605313135ecec426">Use a password manager &nbsp;</li><li data-list-item-id="eb63b60ac4032b3eca7f992e0b74e95b5">Turn on MFA everywhere you can&nbsp;</li><li data-list-item-id="ef4b8b21f6dccdba45a0f751e50edceec">Choose an authenticator app over SMS&nbsp;</li><li data-list-item-id="ea21ef6c61d702b4f3f3b14874b1109d2">Adopt passkeys when available&nbsp;</li></ul><h2>Build a layered defense that works</h2>There’s no single fix for cybersecurity. The strongest protection comes from combining tools that reinforce each other:<ul type="disc"><li data-list-item-id="e9103f9164c0015d124a746b512b58630">Passphrases protect against guessing and reuse&nbsp;</li><li data-list-item-id="e09e76fdc1cf114a79d3205044d2b4894">Password managers make strong habits sustainable&nbsp;</li><li data-list-item-id="e11204eee1d8516ebf6a7218416e4b33d">MFA blocks unauthorized access&nbsp;</li><li data-list-item-id="e549576d6a19185416cc2e423b8e08fcf">Authenticator apps strengthen that layer&nbsp;</li><li data-list-item-id="e3bf65eec480f11a943d6de5153de9028">Passkeys reduce reliance on passwords entirely&nbsp;</li></ul><h2>Build better sign-in habits, one step at a time</h2>Together, they create a system that’s much harder to break—and much easier to live with. Attackers don’t need much, just one weak password, one reused login, one missed step. That’s why small upgrades matter. A stronger passphrase. Turning on MFA. Using a password manager. Choosing passkeys when you can.You don’t have to do everything at once. But each step you take makes it harder for someone else to take control.

Cybercriminals aren’t just guessing passwords anymore, they’re logging in

Why Passkeys, MFA and Strong Passphrases Matter More Than Ever

Head of Corporate Responsibility and Public Policy

April is&nbsp;<a href="https://www.jumpstart.org/awareness/financial-literacy-month/">Financial Literacy Month</a>, an annual campaign to help people of all ages&nbsp;acquire the&nbsp;skills they need to make informed financial decisions and plan for the future. Every year, companies, nonprofits, libraries, schools, banks and more come together to develop resources, host workshops and raise awareness of simple ways to strengthen financial skills.Today, those skills go beyond budgeting and saving. Financial wellness and digital wellness are deeply connected.&nbsp;From online banking to mobile payments to scams and identity theft, financial decisions increasingly happen in digital environments.At Gen, we’re working to help people build both.Through partnerships with organizations like the&nbsp;<a href="https://www.jumpstart.org/">Jump$tart Coalition</a> and the&nbsp;<a href="https://nclnet.org/">National Consumers League</a>,&nbsp;and through the work of MoneyLion, part of the Gen family of brands, we are expanding access to the tools and education people need to navigate financial life with confidence.&nbsp;Supporting the Next Generation of Financial Decision-MakersEarlier this year, we announced a new partnership with the Jump$tart Coalition, the official nonprofit partner of Financial Literacy Month. The Jump$tart Coalition works to advance financial literacy through programs&nbsp;that reach students across K–12 classrooms nationwide.&nbsp;As an example, during Financial Literacy Month, the Jump$tart Coalition hosts an annual&nbsp;<a href="https://www.jumpstart.org/awareness/check-your-school/teen-teach-in/">Teen Teach-In</a>, where high school students studying personal finance teach elementary school students key financial concepts.&nbsp;The program builds understanding early and encourages peer-to-peer learning in communities.We also continue our longstanding support of&nbsp;<a href="https://lifesmarts.org/">LifeSmarts</a>, a program of the National Consumers League (NCL), that helps young people build critical knowledge in personal finance, consumer rights, identity protection and other digital issues. Beyond its flagship scholarship competition, LifeSmarts offers a wide variety of&nbsp;<a href="https://lifesmarts.org/resources/">trainings and resources</a> to support young people in their financial wellness journeys. In honor of tax season Gen, NCL and LifeLock, part of the Gen family of brands, collaborated on a study guide to help first-time filers understand common tax scams and how to avoid them. The resource is available&nbsp;<a href="https://www.linkedin.com/posts/gendigitalinc_the-tax-scam-threat-activity-7445205859850436608-i3SK?utm_source=share&amp;utm_medium=member_desktop&amp;rcm=ACoAAAFtbI0B8PsFXlFu9p7Fy9WC_jon5VUXPlk">here</a>.&nbsp;Enhancing Financial Wellness Through Identity Theft ProtectionFinancial literacy today must include identity protection. As part of MoneyLion’s platform evolution, we introduced identity protection services for MoneyLion WOW members, bringing LifeLock-powered scam and identity protection directly into the app. This expands MoneyLion’s capabilities beyond financial management to include identity protection. These protections are especially important for younger users. Gen Z and millennials experience&nbsp;<a href="https://www.moneylion.com/trending/money/moneylion-adds-protection-benefits">higher rates</a> of scams than any other generation,&nbsp;making education and protection critical.We also partner with the&nbsp;<a href="https://www.idtheftcenter.org/">Identity Theft Resource Center</a> (<a>ITRC</a>) to raise awareness about evolving threats, including mobile scams, impersonation phishing and romance scams. Through collaborations like&nbsp;ITRC president James E. Lee appearing on&nbsp;LifeLock’s Control Room series, we help translate complex risks into practical, everyday actions people can take to protect themselves.Financial Literacy Month is an important moment—but this work continues year-round. By combining partnerships, technology and education, we aim to make financial and digital skills more accessible to more people. From classrooms to mobile apps, we are helping individuals build confidence, avoid risks and make informed decisions in an increasingly connected world.To learn more about how Gen supports financial wellness and digital safety, explore our&nbsp;<a href="https://s201.q4cdn.com/771113172/files/doc_downloads/2025/06/Gen-Social-Impact-Report-2025.pdf">Social Impact Report</a>.&nbsp;These grants were awarded from the Gen Foundation, a corporate-advised fund of Silicon Valley Community Foundation.

Gen, MoneyLion and our partners expand access to financial education during Financial Literacy Month 

Building Financial Confidence in a Digital World

Every year on March 27th, <a href="https://ailiteracyday.org/">National AI Literacy Day</a> brings together educators, students and families to explore how to prepare learners for an AI-enabled world. Organized by the EDSAFE AI Alliance, aiEDU, Common Sense Media and The Tech Interactive, the day combines professional development opportunities for teachers with resources and hands-on activities for students that help demystify AI and support responsible use of this rapidly evolving technology.&nbsp;&nbsp;At Gen, we believe helping young people understand technology is key to building a safer digital future, and we’re excited to join in this day of action.&nbsp;&nbsp;Together with <a href="https://www.discoveryeducation.com/?utm_source=cep_marketing&amp;utm_medium=paid_partner&amp;utm_campaign=cep_Norton_Ailitblog">Discovery Education,</a> a global leader in standards-based curriculum for K-12 learning, we created “<a href="https://mydigitallife.discoveryeducation.com/pages/87386ff6-712d-4c5e-9d78-dd51477eec87">Think Smart: Exploring AI and Staying Safe Online</a>.” This new video series is designed to help children and young people understand AI works and how to use it responsibly. The videos introduce key concepts such as where AI appears in everyday life and how to recognize potential risks. The series is available free to educators, students and families through <a href="https://mydigitallife.discoveryeducation.com/">My Digital Life</a>, a multilingual education platform developed by Discovery Education and Norton, part of the Gen family of brands.&nbsp;&nbsp;Supporting Educators with AI Literacy Resources&nbsp;Norton has partnered with Discovery Education and <a href="https://naaweb.org/">National AfterSchool Association</a> on My Digital Life since 2023. The platform provides teachers around the world with standards-aligned instructional resources that help students develop essential digital citizenship skills.&nbsp;&nbsp;Lesson plans, interactive activities and videos for students in grades 3-8 explore topics such as cyberbullying, misinformation and protecting personal data. Norton’s technical expertise helps ensure the content remains accurate and reflects the latest developments in the digital landscape.&nbsp;The new AI video series builds on this foundation. Through animated storytelling and relatable scenarios, it explores how artificial intelligence intersects with online safety and everyday digital behavior. The lessons encourage students to think critically about technology while developing the skills needed to use AI responsibly.&nbsp;Since launching, My Digital Life resources have reached nearly <a>490,000</a>&nbsp;young people globally. These materials are currently available in English, Spanish, Arabic, <a>Hindi</a>, French and German,&nbsp;helping bring digital education into classrooms across multiple regions.&nbsp;Expanding Access to AI Education&nbsp;Our collaboration with Discovery Education is part of Gen’s broader effort to expand access to digital safety and AI education for young people.&nbsp;We also partner with <a href="https://www.wagggs.org/en/">World Association of Girl Guides and Girl Scouts</a> (WAGGGS), a global movement reaching millions of girls and young women. In 2025, new AI education modules were added to <a href="https://www.wagggs.org/en/what-we-do/surf-smart-20/">Surf Smart 2.0</a>, a nonformal digital safety education program developed by WAGGGS and Norton that has reached more than 850,000 participants worldwide. Through the program, students explore how AI appears in their daily lives, from chatbots to content recommendations, and learn how to set thoughtful boundaries with emerging tools.&nbsp; &nbsp;&nbsp;Gen also supports Discovery Education’s <a href="https://digitalcitizenship.discoveryeducation.com/">Digital Citizenship Initiative</a>, which helps students build the skills needed to create a more respectful and responsible online world. The initiative includes multiple resources on <a href="https://digitalcitizenship.discoveryeducation.com/ai-literacy">AI literacy</a>, helping middle and high school students better understand how AI shapes their online experiences.&nbsp;&nbsp;Additionally, we participated in “Teaching AI with Confidence: Skills and Strategies for AI Literacy Day,” a free panel discussion for educators to help strengthen AI‑ready instruction across grade levels. Gen’s Head of Corporate Responsibility &amp; Government Affairs joined the panel, which highlighted practical, age‑appropriate strategies for teaching AI and digital citizenship. Check out the <a href="https://home.edweb.net/webinar/ai20260311/">full recording</a>.&nbsp;&nbsp;By working with educators, nonprofits and technology leaders, we aim to ensure that young people not only understand the tools affecting their digital lives but also feel empowered to use them safely and responsibly.&nbsp;To learn more about Gen’s digital education and training efforts, explore our latest&nbsp;<a href="https://www.gendigital.com/us/en/social-impact/social-impact-report/" target="_blank">Social Impact Report</a>.&nbsp;&nbsp;&nbsp;These grants were awarded from the Gen Foundation, a corporate-advised fund of Silicon Valley Community Foundation.&nbsp;

Gen partners with Discovery Education on new video series focused on AI literacy

Helping Students Understand AI in the Classroom

Every year on March 8, International Women’s Day invites us to celebrate the long history of women’s social, economic and cultural progress while recognizing the work still ahead — including in the digital world.&nbsp;&nbsp;&nbsp;Technology has opened new doors for connection, learning and opportunity. Yet it has also introduced new risks. According to UN Women, technology-facilitated violence against women and girls is on the rise, with <a href="https://www.unwomen.org/en/digital-library/publications/2024/10/intensification-of-efforts-to-eliminate-all-forms-of-violence-against-women-report-of-the-secretary-general-2024" target="_blank" rel="noreferrer noopener">studies</a> showing that as many as 58% have experienced forms of digital abuse, including hacking, stalking, and online harassment.&nbsp; &nbsp;At Gen, we believe the internet should be safe for everyone. That belief drives our partnership with the <a href="https://www.wagggs.org/en/" target="_blank" rel="noreferrer noopener">World Association of Girl Guides and Girl Scouts</a> (WAGGGS), a global movement reaching millions of girls and young women.&nbsp;&nbsp;Together with WAGGGS, Norton, part of the Gen family of brands, codeveloped <a href="https://www.wagggs.org/en/what-we-do/surf-smart-20/" target="_blank" rel="noreferrer noopener">Surf Smart</a>, a nonformal education program that has reached more than 850,000 girls and young women worldwide with digital safety resources to date. In early 2026, WAGGGS launched the next evolution of this work: <a href="https://www.wagggs.org/en/news/advocacy-for-generation-digital-a4gd-launches-to-support-youth-led-action-for-a-safer-digital-world/" target="_blank" rel="noreferrer noopener">Advocacy for Generation Digital</a>.&nbsp;<h2>Moving From Education to Action&nbsp;</h2>Advocacy for Generation Digital builds on Surf Smart 2.0 and helps girls and young women transform knowledge into leadership. The curriculum supports participants as they identify digital issues that matter most to them, strengthen research and communication skills and design advocacy campaigns that promote safer and more inclusive online spaces. &nbsp;The program offers learning pathways for elementary, middle and high school students and can be adapted to local contexts. It is available in English, French, Spanish and Arabic. WAGGGS also provides <a href="https://campfire.wagggs.org/topic/grant-application-advocacy-generation-digital-2026?_gl=1*1huf6ak*_ga*MzAyNTY1NDA5LjE3NjI1NjA1OTQ.*_ga_T1311503CC*czE3NzA5MjQzMzMkbzEwJGcxJHQxNzcwOTI0ODY5JGo2MCRsMCRoMA.." target="_blank" rel="noreferrer noopener">advocacy grants</a> to Member Organizations, helping bring youth-led projects to life in communities around the world.&nbsp;The impact of youth advocacy is already clear. In 2023 and 2024, young women in 10 countries launched campaigns addressing digital inclusion and online safety. Some organized public panels. Others engaged local media. Sophia Nabbale and Ronah Akatukunda from Uganda presented at the United Nations Civil Society Conference 2024 in Nairobi, highlighting the intergenerational digital divide and the fight against online violence.&nbsp;“Gen and WAGGGS share a vision for digital life," said Leena Elias, Chief Product Officer at Gen. "We believe the internet can be place where young people learn, connect and express themselves safely. Advocacy for Generation Digital is another step toward bringing that vision to life, empowering girls and young women to shape digital spaces that reflect their needs and aspirations.”&nbsp;<h2>Preparing the Next Generation for an AI-Driven World</h2>Our partnership continues to evolve with technology. In 2025, Surf Smart 2.0 was updated to include new modules on artificial intelligence. Participants explore how AI shows up in their daily lives, from chatbots to content recommendations, and learn how to set responsible boundaries with emerging tools.&nbsp; &nbsp;Throughout 2026, Gen and WAGGGS are also amplifying the voices of program participants — sharing firsthand accounts from Smart Surfers and Advocacy Champions about what they’ve learned and how they are leading change in their communities.&nbsp;

Digital Freedom depends on more than protection. It requires participation, confidence and leadership. By investing in youth-led advocacy, we are helping ensure the next generation is not only prepared to navigate the digital world safely — but ready to shape it.&nbsp; &nbsp;To learn more about how Gen supports digital education and training around the world, explore our latest <a href="https://www.gendigital.com/us/en/social-impact/social-impact-report/" target="_blank" rel="noreferrer noopener">Social Impact Report</a>. &nbsp;&nbsp;These grants were awarded from the Gen Foundation, a corporate-advised fund of Silicon Valley Community Foundation.&nbsp;&nbsp;

In celebration of International Women’s Day, Gen highlights its partnership with the World Association of Girl Guides and Girl Scouts 

From Digital Skills to Digital Advocacy: Empowering Girls to Lead Online 

From September 15 to October 15, we celebrate Hispanic Heritage Month, a time to honor the significant contributions of Hispanic and Latino Americans to the history and culture of the United States.&nbsp;&nbsp;Hispanic Heritage Month began as a week-long commemoration in 1968.&nbsp; By 1988, the celebration was extended to 30 days.&nbsp;At Gen, we proudly recognize the significance the Hispanic community has made on our community. HOLA, which stands for Hispanic and Latino Outreach, Leadership and Advancement, serves as a support network at Gen to drive awareness of Hispanic and Latino contributions. HOLA fosters a supportive environment where people are empowered to thrive professionally, personally and within their communities through events and networking opportunities.&nbsp;&nbsp;In celebration of Hispanic Heritage Month, we are highlighting Genovators and HOLA Co-Champions Brittany Gutierrez, Senior Benefits Analyst, and Iskander Sanchez-Rola, Director of Innovation.Enjoy reading a piece of their stories and why they see HOLA as so crucial.&nbsp;&nbsp;Q – Why did you decide to become Co-Champion of HOLA?&nbsp;Brittany: I've been a co-champion for 4 years now. I went for it just because I co-led a resource group at a previous employer, and loved how it built a community and established a lot of connections. Because I moved from California to Arizona, I was looking for a sense of home, and I wasn't getting a lot of that. It was like an escape creating a family away from home.&nbsp;&nbsp;Q – How has being a part of HOLA impacted your experience at Gen?&nbsp;Iskander: Cultural awareness promotes diversity and inclusion. This can lead to more innovation and a supportive work environment, which I think is extremely important for a company like Gen. It helps team members understand and appreciate different perspectives, fostering collaboration and mutual respect.&nbsp;&nbsp;Q – How can people honor and celebrate Hispanic Heritage Month?&nbsp;Brittany: There are all kinds of ways to just immerse yourself around this time, and at the same time learn what the celebration is about and why we can't forget all the contributions Hispanics Latinos have made over the years. There are movies playing. There are shows playing. So, be on the lookout. Basically, it's not just a matter of going to eat at a Mexican restaurant. It's more than that.&nbsp;Iskander: There are many things that you can do that can help the community. For example, participating in cultural events in your state or supporting Hispanic and Latino-owned businesses around. Also, learning and teaching other people about the community and the stories is important. Last year, during Heritage month we discussed Hispanic/Latino names that changed history. We are talking about scientists or astronauts like Luis Alvarez and Ellen Ochoa. Hispanic/Latinos changed the world, and we are still changing it right now.&nbsp;&nbsp;Q – Is there anything else you want people to know about HOLA or Hispanic Heritage Month?&nbsp;Iskander: I think it is important to open and include everyone. We welcome absolutely everyone that will help, and we would not be anything without our allies. &nbsp;&nbsp;Join us in applauding Brittany and Iskander for their contributions to the Hispanic and Latino community. We can draw inspiration from their stories to foster thoughtfulness and enrich our own lives by embracing diverse backgrounds and experiences.&nbsp;&nbsp;Learn more about Hispanic Heritage Month <a href="https://www.hispanicheritagemonth.gov/">here</a>.&nbsp;&nbsp;

Highlighting HOLA Champions at Gen 

Gen Celebrates Hispanic Heritage Month

Our team invests countless hours in the exploration, discovery and investigation of emerging trends such as AI and futuristic technology. Stay informed about the evolving landscape of cyberthreats through our diligent efforts and insights.

Security Evangelist at Gen

Research

A fake job interview page is easier to trust than a fake ticket shop.In samples reviewed by Gen threat researchers, scammers used branded hiring pages that looked like ordinary recruitment flows: a company logo, a recruiter profile, a 30-minute meeting, and a button to continue with Google or Facebook. There was no attachment to open and no software to install. The credential theft attempt sat inside a step many job applicants already expect: signing in to schedule a call.FIFA is an obvious lure ahead of the 2026 World Cup. On May 22, ESET reported fake FIFA-themed websites that copied ticket and merchandise flows to steal money and personal data. Our researchers later found another FIFA-themed domain, hxxps://fifa-mg[.]shop, which followed a naming pattern not mentioned in that report. Domains like these can be short-lived, often appearing for hours or days before they are blocked, abandoned, or taken down.Our researchers also found a different kind of FIFA lure: hxxps://fifahiring[.]com, a fake hiring page that encouraged users to schedule a call with an alleged FIFA recruiter. When a user tried to register with a personal Gmail address, the page asked for a business email instead. The page was steering victims toward credentials with more value: accounts that could provide access to a company environment.

<h4>The FIFA hiring page did not point to FIFA</h4>The fake page looked believable at first glance.

It used FIFA branding, presented a recruiter identity, and copied parts of the experience users see on legitimate recruiting and scheduling platforms. The recruiter’s name and photo appeared to match a real LinkedIn profile, which made the page feel more credible. For publication, we should keep that person’s identity redacted.The domain did not match FIFA’s real hiring infrastructure. FIFA’s legitimate careers pages are jobs.fifa.com and fifa.pinpointhq.com. The fake page used neither. It also loaded the favicon from the real FIFA recruitment site hosted at pinpointhq.com, giving the page a small visual cue borrowed from the legitimate service.Other signals pointed in the same direction. The domain and certificate were newly created, from May 23. The site used commodity hosting infrastructure, including Vercel and Render, rather than a corporate environment. Those signs are not enough on their own, but they fit the rest of the evidence.The login flow was the clearest part. Credentials were posted to:fifeq2026eqbackeq[.]onrender[.]com/api/loginThe Google sign-in prompt was not a real Google authentication window. It was rendered inside the page itself. The visible controls and links did nothing, and the page did not send the user into a genuine Google sign-in flow. According to the analysis, the only Google asset loaded was the favicon, apparently to make the fake window look familiar.A page can look like it opened a Google login without ever handing control to Google.Researchers also observed hxxps://careers-fifahiring[.]com, which later became inactive, and hxxps://fifajobs[.]com, which showed the same content and was indexed by Google.&nbsp;<h4>The recruitment lure went beyond FIFA</h4>The FIFA page was one version of a wider recruitment phishing pattern. The brand can change. The flow stays familiar: recruiter profile, meeting prompt, business email, fake sign-in.Researchers found similar fake hiring pages abusing other major brands, including Heineken, Hilton, Coca-Cola, Netflix, PepsiCo, Delta,&nbsp;and Spotify. In the Heineken case, the page appeared to use the identity of someone who, according to LinkedIn, really works as a recruiter at the company.

Additional hunting found two other recruitment-themed kits:hxxps://aquent-talent-jobs[.]com hxxps://hays-talent-opportunities[.]comThe Hays-themed version targeted Facebook credentials instead of Google credentials. Researchers assessed that the Aquent and Hays pages shared code, although they differed from the earlier FIFA examples.

This flexibility makes the campaign harder to frame as a single World Cup scam. FIFA provides the timely hook, but the mechanism is recruitment phishing. A scammer can swap the logo, recruiter name, and sign-in provider while keeping the same basic path to the victim’s credentials.<h4>Why fake recruitment pages work</h4>Recruitment gives attackers a clean excuse to ask for things that might otherwise raise suspicion.A candidate expects to click a scheduling link. They expect a recruiter profile. They expect a calendar prompt. In some cases, they may also expect to use a work email, especially for corporate, contractor, or partner-facing roles.The fake login window turns that ordinary flow into credential theft. Users are used to “Continue with Google” and “Continue with Facebook” buttons, but the button itself proves nothing. A genuine authentication flow should take the user to the provider’s domain and controls. A fake page can draw a convincing copy while keeping the victim inside the attacker-controlled site.The business email prompt is also a warning sign. A page that rejects a personal email and asks for a work address may be trying to raise the value of the stolen account.<h4>What job seekers should check before signing in</h4>Start from the company’s official careers page, not from a link in a message, ad, search result, or forwarded post. For FIFA, that means checking jobs.fifa.com or fifa.pinpointhq.com, not trusting a domain because it contains “fifa,” “career,” “hiring,” or “jobs.”Look closely at the domain before entering credentials. Scam pages often add plausible hiring words around a brand name: career, talent, jobs, hiring, portal, or connect. A polished page on a new domain is still a new domain.Treat the sign-in step as the real checkpoint. If a page offers Google or Facebook login, check whether the flow actually opens a real provider-controlled authentication page. A fake window embedded inside the original site, broken controls, inactive links, or a provider logo used only as decoration should stop the process.Use security software that includes web and phishing protection. These tools can block known malicious pages before they load, which is especially useful when scam domains look polished, appear in search results, or are shared through otherwise legitimate channels.<h4>What companies can do</h4>Recruitment pages are public by design, which makes them easy to copy.Security teams should monitor for newly registered domains combining their brand with hiring-related terms. They should also watch for pages that reuse favicons, recruiter photos, job descriptions, and calendar-booking language from legitimate hiring flows.HR and recruiting teams should make the official hiring path easy to verify. Candidates should not have to guess whether a domain is legitimate. A clear careers page, consistent recruiter communication, and warnings about unofficial scheduling links can remove some of the ambiguity attackers rely on.<h4>Conclusion</h4>The fake FIFA hiring page worked because it did not feel unusual. It looked like a normal step in a hiring process.Attackers do not need to invent new behavior when they can copy one people already trust. A branded scheduling page, a recruiter profile, and a familiar sign-in button can be enough to move a victim from interest to credential entry.The decision point is the login. Before entering a work email or password, check the domain, check where the authentication flow really goes, and verify the role through the company’s official careers site. Security software with web and phishing protection adds another layer, especially against short-lived scam pages that may only stay online for hours or days.IOCs:hxxps://fifahiring[.]com hxxps://careers-fifahiring[.]com hxxps://fifajobs[.]com hxxps://fifa-mg[.]shop hxxps://heineken-careers[.]com hxxps://aquent-talent-jobs[.]com hxxps://hays-talent-opportunities[.]com fifeq2026eqbackeq[.]onrender[.]com/api/login

Scammers are copying recruitment and calendar-booking flows to make fake Google and Facebook sign-ins look routine. 

Fake hiring pages abuse FIFA and other major brands to steal work credentials 

Threat Research Team Lead

Since January 2026, we have detected 7.4 million malicious incidents tied to residential proxy traffic, affecting 572,000 users in our telemetry. In this model, the household whose connection is being used is often not the buyer of the traffic. It is the exit point.That is the uncomfortable part of residential proxy networks. A home router, laptop, phone, smart TV, or other always-on device can quietly become part of a commercial network that routes strangers’ internet traffic through ordinary consumer IP addresses. To the websites on the other end, that traffic looks as if it came from a real household, because it did.The technology itself is not inherently malicious. Businesses use residential proxies for market research, ad verification, brand protection, security testing, and services that need to see the web as a real user would. But the same feature that makes these networks useful also makes them attractive for abuse: traffic from a household IP address is hard to block without risking false positives against legitimate users.The problem for consumers is simpler. Many people do not realize their device or connection can be enrolled into this kind of network at all. Some users opt in through pay-for-bandwidth apps. Others are enrolled through “free” VPNs, bundled software development kits inside unrelated apps, or unwanted software that installs proxy components without meaningful consent.Here is how the market works, who pays for it, and what it can cost the household that unknowingly hosts it.<h2>What is a residential proxy</h2>A residential proxy is an internet connection – typically a home laptop, phone, smart TV, or router – that has been enrolled into a third-party network and is being used to route someone else's traffic. To the rest of the internet, that traffic looks like it is coming from an ordinary household IP address assigned by a consumer ISP, not from a datacenter or&nbsp;VPN provider.Residential proxy networks are sold commercially. The model is two-sided: some people pay to tunnel their traffic out through someone else's connection (much like a VPN, except the exit point is a real home), while others get paid to provide those exit endpoints. Some are structured as paid peer-to-peer networks, where any participant's connection can serve as an exit for any other.Buyers pay for access to pools of millions of these "real user" IPs because they are extremely difficult to block, or rather, blocking them carries real consequences: the traffic originates from genuine households, so any block risks shutting out a legitimate user – effectively a false positive.Common buyers include market research firms, price-comparison services, brand-protection vendors, security teams testing their own defenses, and consumer privacy tools. At the abusive end of the market, the same infrastructure used by operators running automated purchasing bots, scrapping campaigns, ad fraud, credential stuffing, phishing and other attacks where hiding the true origin of the traffic matters. Demand is also being shaped by large-scale web scraping, including&nbsp;<a href="https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/">scraping for AI training data</a>. As anti-bot systems become better at identifying traffic from datacenters and known VPN providers, residential IP addresses become more attractive because they look like ordinary users. That does not make every residential proxy user malicious. It does mean consumers may be carrying traffic for businesses and actors they have never heard of.<h2>How consumer devices end up in these networks</h2>There are several ways a home device can become part of a residential proxy network. Some are explicit. Others are easy to miss.The most obvious route is the pay-for-bandwidth model. Apps such as Honeygain, IPRoyal Pawns, and PacketStream pay users to share their internet connection. The user opts in, but they may not understand who will buy access to that connection later, what kind of traffic will pass through it, or what happens if that traffic triggers abuse reports.A second route is the “free” VPN or proxy app. Instead of charging a subscription, the app monetizes the user’s connection by reselling bandwidth. In practice, the user may think they are getting a privacy tool while also becoming infrastructure for other people’s traffic.A third route is through bundled software development kits, or SDKs. A developer adds a third-party component to an otherwise unrelated app, such as a flashlight, wallpaper, game, or utility. The developer gets paid when the app is active. The user sees the host app, not the proxy network behind it.The fourth route is malware or potentially unwanted software. In those cases, the proxy component is installed silently or deceptively, with no meaningful user consent at all.<h2>Why the "consent" is rarely meaningful</h2>Even when consent technically exists, it is often not the kind of consent most people would recognize.The disclosure may be buried in a long terms-of-service document. The wording may be vague, with phrases such as “share your unused bandwidth,” “support the app,” or “join our network.” These phrases do not clearly tell the user that arbitrary third parties may route traffic through the user’s home IP address.There is also the question of downstream use. Users are rarely told who buys access to the network or what those buyers do with it. Their connection could be used for benign market research. It could also be used for scraping, automated account creation, ad fraud, credential stuffing, or phishing infrastructure.The problem gets worse when the proxy component sits inside another app. The host app’s privacy policy may mention a partner SDK by brand name, but that still does not make it clear to a normal user that their device can become a proxy endpoint.Uninstalling the visible app may not always resolve the issue cleanly either, especially when proxy components are installed separately or bundled with other unwanted software.<h2>The risks consumers actually carry</h2>When a household device becomes a residential proxy node, the user takes on risks created by someone else’s traffic.The first risk is attribution. Abusive, fraudulent, or illegal activity routed through the device appears to come from the household’s IP address. ISP abuse notices, platform bans, fraud checks, and law enforcement requests point first to the subscriber, not to the person who bought the proxy traffic.The second risk is performance. Continuous third-party traffic can consume bandwidth, slow the home network, hit data caps, or violate ISP terms of service. The user may only notice that the internet feels slower, a bill is higher, or a service suddenly blocks access.The third risk is security exposure. Proxy clients run persistent background processes and maintain network connections so they can relay traffic. That adds always-on networking software to the device, often with limited visibility for the user.The fourth risk is reputation. A home IP address used for abuse can end up on blocklists used by banks, retailers, streaming services, and online platforms. The result can be account friction, failed logins, extra verification steps, or outright blocking from services the household actually uses.There is also a family angle. A child or another household member may install a free game, VPN, or utility without understanding the consequences. The legal, financial, and reputational risk still lands on the account holder.<h2>What our telemetry shows</h2>Since the beginning of 2026, we have detected 7.4 million malicious traffic incidents associated with residential proxy traffic, affecting 572,000 unique users in our user base.&nbsp; This is not a measurement of the entire residential proxy market. It reflects what we observe in our telemetry: malicious traffic, detections, and related activity affecting protected users. The real footprint is far larger, because residential proxy networks span major consumer platforms and many devices outside our visibility.The activity is global, but it is concentrated in a smaller set of countries. India leads by a wide margin, with roughly 83,000 affected users, followed by Vietnam with 61,000 and Brazil with 39,000. The Philippines (23,000), Poland (18,000), Indonesia (18,000) and Thailand (14,000) form a second tier, with Egypt, Spain, Ukraine, Argentina, Mexico and Italy each accounting for 10,000 to 13,000. The spread across South and Southeast Asia, Latin America, and Eastern and Southern Europe reflects where the host apps that carry this software are most widely installed.That geographic spread likely reflects a combination of app distribution, local install patterns, user appetite for free or pay-for-bandwidth apps, and the economics of bandwidth resale. It should not be read as a simple ranking of where residential proxy abuse originates.The chart below breaks down the threats we observed in this proxy-related traffic. Two categories dominate: phishing and malicious advertising. Behind them sits a long tail of consumer-facing fraud, including e-shop scams, generic scams, financial scams, and fake-tutorial pages, alongside outright malware such as trojans and other malicious traffic.&nbsp;

In the malicious proxy traffic we observed, scams and malware dominate. The important point for consumers is not only that their connection may be used by someone else. It is that, when abuse happens, their household IP address can be the return address.<h2>What consumers can do</h2>Most people will not identify a residential proxy component by name. But there are practical warning signs.Review “free” VPNs, proxy apps, bandwidth-sharing apps, and utilities from unknown publishers. Check whether they mention bandwidth sharing, peer-to-peer networking, traffic routing, or network participation in their terms. If an app offers payment for leaving your device online, assume your connection may be resold unless the provider explains exactly how traffic is vetted and who can buy access.On phones and computers, remove apps you do not recognize or no longer use. On home routers, check the list of connected devices and look for anything unfamiliar. If your ISP sends abuse notices, websites start blocking you, or your home IP address suddenly fails fraud checks, a proxy component is one possible explanation.Security software can also help by detecting unwanted proxy clients, bundled components, and related malicious activity. But this should not be a guessing game for consumers. Software that turns a household connection into a commercial exit node should be named clearly and made easy to remove.<h2>The takeaway&nbsp;</h2>With residential proxiesthe user’s connection becomes an infrastructure for someone else’s business.The issue is not that residential proxy technology exists. It has legitimate uses. The issue is whether people know when their devices are part of it, understand what kind of traffic may pass through their connection, and have a real choice to opt out.The fix is not to pretend consumers will read every EULA. This software should be named clearly, shown plainly, and made easy to remove before a household connection becomes someone else’s infrastructure.

Your home connection could be routing traffic for strangers. Here's how residential proxy networks work, how devices get enrolled and what our telemetry reveals about the risks for consumers.

Who's Really Using Your Home Internet Connection?

Threat Researcher at Gen

<h4>Key Points&nbsp;</h4><ul><li data-list-item-id="e43a143fd054561c50dba51071686adff">Gen Threat Labs has been tracking GoFlateLoader, a widespread Golang loader used to deliver multiple infostealers, including Amatera, Remus, Lumma, Vidar and StealC.&nbsp;</li><li data-list-item-id="e3d3b5d0814ea5b26aa75a8d3d6013a39">GoFlateLoader appears both in x86 (32-bit) and x86-64 (64-bit) variants, matching the bitness of the payload it is supposed to execute.&nbsp;</li><li data-list-item-id="e51ccafcfb8c418d894aeb685004a0ba5">The loader is designed for in-memory payload execution and is deliberately inflated with a massive PE overlay to hinder detection</li><li data-list-item-id="ec4bafef8a1113d24bc2b4b3a943228d1">The two main delivery paths are via supposedly cracked software and a <a href="https://research.checkpoint.com/2026/impersonation-click-hijacking-and-tds-inside-a-malware-distribution-ecosystem/" target="_blank" rel="noreferrer noopener">malicious TDS recently documented by Check Point Research</a>, which may redirect users to dedicated landing pages serving password-protected archives containing GoFlateLoader.&nbsp;</li></ul><h4>Introduction&nbsp;</h4>Not every threat that matters is technically sophisticated, and that is also the case with GoFlateLoader, which is a rather simple loader written in Go, whose sole purpose is to decode and execute the payload in memory. What stands out the most is not what the loader does but rather what it does not do – it comes without anti-debugging, anti-VM, or sandbox-evasion checks, and also lacks API hashing or CFG obfuscation, the kind of tricks that loaders almost always come with. Instead, GoFlateLoader relies on one of the simplest yet still effective tricks to stay under the radar – it appends a massive PE overlay at the end of the file, deliberately inflating the binary's size (hence the name GoFlateLoader).&nbsp;Nevertheless, it is important to understand that malware does not necessarily need to be elegant or stealthy. In the end, the only thing that matters to attackers is whether it can successfully deliver the final payload. And if that is the only metric, GoFlateLoader appears to be working fairly well for its operators, as we continue to see it widely distributed across our user base. Since the beginning of April, we have protected more than 33,000 unique users from it, with the most affected countries including Brazil, India, Argentina, Mexico, Turkey and Spain.&nbsp;

<h4>GoFlateLoader’s Execution Flow&nbsp;</h4>If we strip away the obfuscation noise that the Go compiler and the author’s decoy code add, the loader’s execution flow is short and linear:&nbsp;<ul type="disc"><li data-list-item-id="efa51af3b2859fd9c684efca0c82d3b66">Copy the encoded payload blob from the <code>.rdata</code> section onto the stack.&nbsp;</li><li data-list-item-id="e879bb970c6d1a81b8a42512222aceaa4">Decode the payload using a small, multi-stage, custom byte-level transformation into a valid PE.&nbsp;</li><li data-list-item-id="ebff4f340af15b75cbea0d682b26b7645">Parse the PE headers of the decoded payload (image base, image size, sections, data directories, etc.).&nbsp;</li><li data-list-item-id="e37fb26cad3d18a4a0c8bf9b2595d661f">Allocate an RWX memory region using <code>VirtualAlloc</code> with <code>MEM_COMMIT | MEM_RESERVE</code> and <code>PAGE_EXECUTE_READWRITE</code> flags, trying the payload’s preferred <code>ImageBase</code> first and falling back to an OS-assigned address if that fails.&nbsp;</li><li data-list-item-id="ebbde6d77cdc942c0a6bac79f4f8a6c28">Map the decoded payload into the allocated memory region by copying the PE headers first, then walking the section table and writing each section to its target virtual address.&nbsp;</li><li data-list-item-id="ed16738229e0f5c70a981c0c5f9b715f9">Apply relocations (only if preferred base mapping fails).&nbsp;</li><li data-list-item-id="e76cde4bae1be6c21b897c350c6fd15db">Resolve imports by walking the standard <code>IMAGE_IMPORT_DESCRIPTOR</code> table and rebuild the IAT in place via <code>LoadLibrary</code> and<code> GetProcAddress</code>.&nbsp;</li><li data-list-item-id="e786887a3d34fc7ce344ee8375944799e">Transfer execution to the final payload using Go’s <code>syscall.Syscall</code>.&nbsp;</li></ul>&nbsp;This is essentially a textbook example of manual PE loading with the payload reconstructed and executed entirely in memory so that it never touches the disk.&nbsp;&nbsp;

Notably, GoFlateLoader transfers execution to the final payload via <code>syscall.Syscall</code>. In Go, <code>syscall.Syscall</code> has the signature <code>Syscall(trap, nargs, a1, a2, a3)</code>, where <code>trap</code> is the function pointer to invoke, <code>nargs </code>is the argument count, and <code>a1</code>, <code>a2</code>, and <code>a3</code> are the first three arguments passed to the target function. Here, trap is set to point to the final payload’s entry point, <code>nargs</code> is set to <code>1</code>, and since the execution is transferred to that entry point, the remaining arguments serve only as filler values and are never used by the invoked payload. In other words, GoFlateLoader is not issuing a <code>syscall</code> at all, but abusing <code>syscall.Syscall</code> as a generic call gate to hand control to the payload.&nbsp;&nbsp;It is worth emphasizing that GoFlateLoader consistently sets these arguments to the hardcoded values <code>1</code>, <code>2</code>, <code>3</code>, and <code>4</code>, which is unusual enough to stand out as a potential detection opportunity (combined with other patterns).&nbsp;

The loader also carries substantial junk/decoy code, which varies across builds and serves no purpose other than padding the control flow and complicating static analysis.&nbsp;&nbsp;&nbsp;<h4>Inflated PE Overlay&nbsp;</h4>GoFlateLoader’s defining characteristic is its massive size (typically 700-950 MB), caused by an artificially inflated PE overlay appended to the original loader.&nbsp;

This is a deliberate design choice intended to bypass detection, as excessively large executable files may pose challenges for AVs and EDRs, primarily due to performance and resource constraints. As a result, to preserve performance and avoid noticeable impact to end users, these solutions often enforce practical file-size limits for deep scanning and/or emulation.&nbsp;The same logic extends to automated analysis pipelines – bloated files frequently cause timeouts during heuristic analysis and effectively prevent the sample from being uploaded to cloud-based sandboxes or threat intelligence platforms, which enforce their own strict upload limits to manage bandwidth and storage costs. A prime example is VirusTotal, which enforces a strict 650 MB upload limit. The fact that GoFlateLoader consistently sits just above this threshold strongly suggests that VirusTotal is one of the platforms it specifically aims to evade.&nbsp;&nbsp;In most cases, GoFlateLoader’s PE overlays are filled with null bytes, though we have also observed builds with random padding.&nbsp;&nbsp;

Crucially, adding such a PE overlay comes at virtually no distribution cost for attackers, as the inflated data compresses to a fraction of its original size (assuming constant padding).&nbsp;&nbsp;<h4>Delivered Final Payloads&nbsp;</h4>The final payloads distributed through GoFlateLoader are predominantly information stealers, with the most prevalent currently being Amatera, <a href="https://www.gendigital.com/blog/insights/research/remus-64bit-variant-of-lumma-stealer" target="_blank" rel="noreferrer noopener">Remus</a>, and Lumma. Beyond these, we have also observed it distributing Vidar, StealC, and SvitStealer.&nbsp;GoFlateLoader comes in both x86 and x86-64 variants, with each variant matched to the architecture of the payload it is intended to execute.&nbsp;&nbsp;As for how GoFlateLoader binaries are distributed, we have observed at least two notable delivery paths. The first is through supposedly cracked software. The second involves the payload being served via <a href="https://research.checkpoint.com/2026/impersonation-click-hijacking-and-tds-inside-a-malware-distribution-ecosystem/" target="_blank" rel="noreferrer noopener">the malicious TDS recently described by Check Point Research</a>, which redirects users to a landing page that offers a downloadable archive and separately displays the password required to extract it. This approach provides several advantages for the threat actor. First, compression significantly reduces the binary size due to the constant-padded PE overlay. Second, because the archive password is displayed separately on the landing page, it makes it harder for AV and EDR solutions to obtain it and decrypt the archive. As a result, the payload may remain concealed until the victim manually extracts it.&nbsp;&nbsp;&nbsp;<h4>Summary&nbsp;</h4>GoFlateLoader is a reminder that prevalence and sophistication are not the same thing. At its core, it is a rather simple manual in-memory PE loader written in Go, with no novel anti-analysis tricks under the hood. Whatever evasion it achieves comes not from obfuscation or other anti-analysis tricks but from its size – the appended PE overlay is built to slip past size-constrained scanners and automated analysis pipelines. Yet, despite its low level of sophistication, GoFlateLoader remains an active and relevant threat, used to deliver a wide range of prevalent information stealers.&nbsp;&nbsp;Gen products protect our users against both GoFlateLoader and the payloads it delivers.&nbsp;&nbsp;<h4>Indicators of Compromise (IoCs)&nbsp;</h4>Note: The files listed in the IoCs that are not archives all exceed 650 MB in size and are therefore not available on VirusTotal.&nbsp;b88c5744975d2abb447aecc6c090fee9f8580413f4612eecdc6ed1973e8a1739 (password-protected archive containing GoFlateLoader x64 variant loading Remus; pwd: 1234)&nbsp;ed5ae7f36453c5a23e9868a5729d67e0549a11f6dea54f5f52d654a8f51d4902 (archive containing GoFlateLoader x64 variant loading Remus)&nbsp;841c9297cb8a2e0ff89433d13c05bfc760eb2e98e251cb8fa785d2ad7cbac05f (archive containing GoFlateLoader x86 variant loading Amatera)&nbsp;ece7c48eb411b24f26762ede83badb4a644c41d5777129381ac2541804d64fc2 (archive containing GoFlateLoader x86 variant loading Lumma)&nbsp;421ce2d2f49c23bbe9f60ef3b9cd38d7eb912ce02e56a61837656210069bd9e2 (archive containing GoFlateLoader x64 variant loading Vidar)&nbsp;121c2dc793b3873f75a29ec02241f94136de19c049382a50a50d0d5b99507073 (GoFlateLoader x64 variant loading StealC)&nbsp;2415db5081cec9bfd14ad6da1a66169fd96f13a49010c319a73d1ed6fafd4efa (GoFlateLoader x64 variant loading Vidar)&nbsp;d9917ade3b4c125a95b5d3e6343cde26145dfbf569bd7e2a843fd0c6fc8ddc28 (GoFlateLoader x64 variant loading Remus)&nbsp;4cf6893756f441522b94b36f10e5de0e47aeed4743f95c51650746d1ecf97e3d (GoFlateLoader x64 variant loading SvitStealer)&nbsp;8b89d6c9152d3aab97aadd515ecb69ca72654db2f25425759ba4b646853d737d (GoFlateLoader x86 variant loading Lumma)&nbsp;90ce4ff9da23ac150da0a8e17930cab1e369aa349fdc1b65691b70369145664a (GoFlateLoader x86 variant loading Amatera)&nbsp;

 Intentionally Inflated Go Binaries That Use Massive PE Overlays to Bypass Detection

GoFlateLoader: A Widespread Golang Loader Delivering Multiple Infostealers

Malware Researcher

When we published the first part of this research, we said the investigation was still ongoing. That was not a closing line. We were already looking at the infrastructure, the signals behind the attacks, and the scale of the reservation data abuse we were seeing in our telemetry.&nbsp;Then something else happened.&nbsp;Friends, colleagues, and other contacts started forwarding us messages they had received from Booking.com. The messages warned that unauthorized third parties may have accessed information linked to their reservations. Shortly after, media outlets began reporting the same thing: Booking.com had notified affected customers, reset reservation PINs, and said the accessed information could include names, email addresses, phone numbers, booking details, and information shared with accommodations. Booking.com said financial information was not accessed from its systems.&nbsp;The timing mattered, but not because it started our investigation. It mattered because it publicly confirmed the kind of reservation-data exposure our first article had described from the attack side.&nbsp;<a href="https://us.norton.com/blog/online-scams/reservation-hijacking-scam" target="_blank">Reservation Hijack scams</a> work because criminals do not have to guess. A traveler receives a message about a real booking. The message contains details that make sense: the right accommodation, the right trip context, sometimes the right contact information. The link then opens a fraudulent page built around the same accommodation.&nbsp;A generic <a href="https://us.norton.com/blog/online-scams/what-is-phishing " target="_blank">phishing message</a> has to create trust from nothing. This scam steps into a relationship that already exists between the traveler, the booking platform, and the accommodation.&nbsp;While those public warnings were appearing, Gen Threat Labs continued canvassing the data we had available: blocked URLs, fraudulent landing pages, SMS messages, emails, WhatsApp messages, in-app message evidence, and other signals connected to attacks we had already stopped. We used AI-assisted analysis to connect pieces that would otherwise remain scattered: messages, landing pages, accommodation names, URLs, templates, and infrastructure patterns. Human analysts reviewed the results and separated what we could prove from what we could only suspect.&nbsp;The result is a much clearer picture.&nbsp;We identified more than 350 compromised accommodations linked to the Reservation Hijack scam flows, spread across 50 countries. These were not abstract indicators or generic travel-themed pages. In the cases we analyzed, victims had already received reservation-specific information before being pushed to a fraudulent page customized around the accommodation tied to that booking.&nbsp;That is the difference between ordinary travel phishing and this model. The attackers are not guessing who is traveling. They already have enough reservation context to make the fraud feel normal.&nbsp;And they are doing it at scale.&nbsp;

<h3>How we connected the evidence&nbsp;</h3>The second phase of our investigation was already underway when Booking.com’s customer notifications started circulating publicly.&nbsp;Gen’s view of this activity comes from attacks we blocked before they could complete. No single signal tells the whole story. An SMS or WhatsApp message may show the <a href="https://us.norton.com/blog/emerging-threats/what-is-social-engineering " target="_blank">social engineering</a>. A URL may show the redirect path. A landing page may show the accommodation being impersonated. An in-app message may show where the attacker entered the trusted communication flow. A repeated page structure may link incidents that look separate at first.&nbsp;Put together, those pieces show how reservation data moves from compromise to fraud.&nbsp;AI helped us work through that evidence at scale. We used it to normalize accommodation names, cluster similar messages, compare landing-page structures, connect URLs with page content, and flag repeated patterns across channels. This was not “AI says these attacks are connected.” It was AI-assisted triage followed by human review.&nbsp;From that process, we extracted and cleaned accommodation names from captured fraudulent landing pages and identified 350 compromised accommodations.&nbsp;We use “compromised accommodations” carefully here. It means reservation context tied to those accommodations was compromised and used in an attack flow we intercepted. The source of compromise may vary: a hotel account, a booking platform partner account, an email inbox, a property management system, a guest messaging workflow, or a third-party service provider.&nbsp;The end result for the traveler is the same. Criminals had access to information that should have stayed inside the booking relationship.&nbsp;This is also a conservative number. It only includes attacks where we had enough evidence to connect the flow to a specific accommodation. It does not include people who received a message and never clicked, attacks outside our telemetry, landing pages we did not capture, or cases where the accommodation name could not be reliably extracted.&nbsp;So 350 is not the size of the problem. It is the part we could see clearly.&nbsp;<h3>From scam pattern to repeatable operation&nbsp;</h3>A single compromised hotel account can explain a few victims. A copied phishing kit can explain a short campaign. Hundreds of accommodation-specific scam flows across 50 countries point to something more organized.&nbsp;The model we see is consistent.&nbsp;Reservation context enters the fraud chain, sometimes through compromised accommodation-side accounts, inboxes, partner tools, or data obtained from other criminal actors. That context is then used to contact travelers with details that make the message feel legitimate.&nbsp;The wording, the property, the country change. The logic does not.&nbsp;That is why this follow-up is not simply “we found more cases.” The first article explained <a href="https://www.gendigital.com/blog/insights/research/reservation-hijack-scam">how Reservation Hijack scams work</a>. This one shows how far the model has spread.&nbsp;<h3>A worldwide footprint, led by Europe&nbsp;</h3>The highest number of compromised accommodations in our dataset were linked to Germany, followed by France, the United Kingdom, Italy, Spain, and the United States.&nbsp;Germany accounted for 49 compromised accommodations in the dataset. France followed with 35, the United Kingdom with 31, Italy with 24, Spain with 20, and the United States with 19.&nbsp;Together, the top five European countries, Germany, France, the United Kingdom, Italy, and Spain, accounted for 159 compromised accommodations, about 45% of the full dataset.&nbsp;

The European concentration makes sense. Europe has a dense travel market, a high volume of cross-border bookings, many independent and mid-sized accommodation providers, and a strong dependency on online booking platforms and pre-arrival guest messaging.&nbsp;Those conditions give criminals useful cover. Travelers expect messages before arrival. They expect payment questions, check-in instructions, policy reminders, and booking updates. A well-timed fake message does not feel unusual.&nbsp;But the country distribution also shows that this is not a single-region problem. The activity spreads across 50 countries, with a long tail of destinations beyond the largest clusters.&nbsp;

That long tail matters. It suggests the model is not limited to a few obvious tourist destinations or a handful of famous hotel brands. Once criminals have access to reservation data and a working scam flow, the same approach can be adapted to different countries, languages, property types, and booking habits.&nbsp;The property does not need to be famous. It only needs to be real, tied to a real reservation, and recognizable to the victim.&nbsp;<h3>Not just hotels&nbsp;</h3>Hotels make up the largest share of the dataset, but they are not the whole story.&nbsp;We identified compromised accommodations across several property types: hotels, aparthotels, apartments, inns, motels, lodges, resorts, guesthouses, B&amp;Bs, hostels, villas, bungalows, and capsule hotels.&nbsp;

This is a useful reminder of how fragmented the travel ecosystem really is. A traveler may book a large hotel chain, a family-run guesthouse, a serviced apartment, a hostel, or a villa through similar platforms and messaging flows.&nbsp;From the traveler’s point of view, the trust model is almost the same. They made a booking. They expect communication. They may not know whether the message came from the property, the platform, a channel manager, a property management system, or a compromised account sitting somewhere in between.&nbsp;That is exactly the gap criminals are abusing.&nbsp;<h3>How big could this problem be?&nbsp;</h3>To understand the potential scale of Reservation Hijack scams, we looked at the accommodation properties appearing in our research dataset.&nbsp;In total, we identified 350 accommodation entries linked to reservation hijack scam activity. These were not all the same kind of business. The dataset included hotels, aparthotels, resorts, hostels, guesthouses, villas, apartments and other accommodation types. For each one, we estimated the number of rooms, units, beds or capsules, depending on the property type, and used that to calculate the likely maximum guest capacity.&nbsp;Across the deduplicated dataset, these properties represented an estimated maximum capacity of around 82,000 guests at any given time. Using a conservative occupancy rate of 50% and an average length of stay of 2.5 nights, this translates into approximately 6 million guest stays per year.&nbsp;That does not mean 6 million people were scammed. It does not mean 6 million people had their data exposed. What it shows is the size of the opportunity criminals may be looking at when they compromise accommodation or booking communication channels.&nbsp;A single compromised workflow can give scammers something much more valuable than a random phone number or email address. It can give them context: the name of the accommodation, the dates of the stay, the booking amount, the channel the guest expects to be contacted through, and the right moment to create urgency.&nbsp;That is why Reservation Hijack scams are so convincing. The scam does not feel like spam. It feels like part of the trip.&nbsp;

<h3>The activity does not look random&nbsp;</h3>We are still investigating the infrastructure behind these attacks, so we are not attributing the activity to a named group.&nbsp;But the evidence does not look like hundreds of unrelated actors randomly copying one another.&nbsp;Across the dataset we analyzed, the same fingerprints kept appearing. Many pages used the same internal paths for scripts, images and styles. Several included the same unusual overlay component, repeated internal asset paths, and the same card-validation language, including claims that funds would be reserved and refunded within 10 minutes.&nbsp;The pages were also built to look specific to the victim. Hotel names appeared in page titles and visible content. Prices varied from one case to another. Check-in and check-out dates were inserted into the page. In some cases, page metadata and images were synchronized with the accommodation being impersonated. The evidence points to a repeatable process for turning reservation context into property-specific phishing pages. Taken together, those patterns are consistent with a phishing kit designed to generate accommodation-specific pages at scale, rather than pages built manually for each victim.&nbsp;The phishing pages also included a fake live support chat. To the victim, it looked like part of the booking or payment process, but it was controlled from the phishing infrastructure. The payment step could therefore become a live interaction: someone behind the page could react to the victim’s input, ask for another card, explain away a failed “validation”, push the victim to continue, or try to capture a one-time code while the victim still believed they were talking to booking support.&nbsp;Some of the infrastructure also uses legitimate internet services, including services such as Cloudflare, to place a layer between the visible scam page and the systems behind it. That does not make those services malicious. It means criminals are abusing the same infrastructure that normal websites use, including protective layers that can obscure hosting details, traffic paths, and backend systems.&nbsp;For investigators, this kind of setup makes the infrastructure harder to trace. For travelers, it removes many of the usual warning signs. They see a page that loads normally, shows the right accommodation, includes a support chat, and refers to the trip they actually booked. At that point, many people will treat the request as part of the reservation process, even when it is not.&nbsp;<h3>Correct information is not proof of legitimacy&nbsp;</h3>For years, people have been told to watch for bad spelling, odd sender names, generic greetings, and suspicious links. That advice still helps, but it does not solve this problem.&nbsp;A message can include the right accommodation, the right destination, and details from a real stay, and still be malicious. A page can show the correct hotel name, dates, and a plausible payment amount, and still be fake. A request can arrive at the moment when a traveler expects a check-in or payment message, and still be fraud.&nbsp;Page behavior can create false confidence too. In some of the phishing pages we analyzed, the fake support chat looked like part of the booking or payment process. If the victim had a question, or if the card “validation” failed, the page could keep the interaction going instead of simply collecting data and stopping there.&nbsp;That is what makes Reservation Hijack scams difficult for travelers to judge. The victim is not being tricked only by a fake brand or a fake website. They are being pushed through a process built around real context, at the moment when that context feels normal.&nbsp;Travelers expect hotels and booking platforms to contact them. They expect last-minute requests, check-in instructions, payment checks, ID forms, and confirmation messages. Criminals are not fighting that expectation. They are using it.&nbsp;<h3>What travelers should do&nbsp;</h3>The safest rule is simple: do not treat correct booking information as proof that a message is legitimate.&nbsp;If a message asks you to verify payment details, confirm a reservation, re-enter card information, pay a balance, reset a PIN, or avoid cancellation, do not use the <a href="https://us.norton.com/blog/online-scams/i-clicked-on-a-phishing-link" target="_blank">link in the message</a>.&nbsp;Open the booking platform or hotel app directly. Go to the official website yourself. Use contact details from the original booking confirmation. If needed, call the property using a verified number. Check whether the same request appears inside your official booking account.&nbsp;This applies even if the message mentions the right hotel, the right destination, or details from your stay.&nbsp;Booking.com has told customers that it will not ask guests to share credit card details by email, phone, WhatsApp, or text, or ask for a bank transfer that differs from the payment policy in the booking confirmation.&nbsp;If you already entered payment details into a suspicious page, contact your bank immediately, freeze or cancel the card, and monitor for follow-on fraud. Criminals may reuse the card data later, or sell it to others.&nbsp;<h3>What accommodations should take from this&nbsp;</h3>For hotels and other accommodation providers, this is not only a guest-awareness issue. Guest communication has become part of the attack surface.&nbsp;The systems and workflows between the property and the guest are now valuable targets. That can include hotel staff accounts, booking platform partner accounts, email inboxes, property management systems, guest messaging tools, channel managers, and third-party service providers.&nbsp;The lures we have seen on the accommodation side are not exotic. They look like normal hotel work. Some impersonate Booking.com and claim there is a guest complaint waiting for a response. Others say that a paid reservation needs urgent verification, or that the property’s visibility or ranking may be affected if staff do not act quickly. We have also seen payment and invoice-themed messages designed to make staff open attachments or documents that can lead to credential theft or <a href="https://us.norton.com/blog/malware/signs-of-malware" target="_blank">malware infection</a>.&nbsp;

That is why the first visible sign of a Reservation Hijack scam may not be the message sent to the guest. It may start earlier, with an email to a shared hotel inbox, a fake partner-support notice, a malicious attachment, or a document that looks like part of normal accounting or reservation handling. Once reservation context is obtained, whether directly or through another actor in the criminal ecosystem, it can be used later to make guest-facing scams much more convincing.&nbsp;For accommodation providers, staff training needs to cover the workflows criminals are actually abusing. Urgent complaints, reservation-verification requests, payment advice emails, invoice notifications, security-update prompts, and any message asking staff to open an attachment, enable content, sign in again, or act under time pressure should all be treated as possible entry points into the same fraud chain.&nbsp;The defensive work starts with account protection, but it should not stop there. Accommodation providers need strong <a href="https://us.norton.com/blog/account-safety/multi-factor-authentication" target="_blank">multi-factor authentication</a>, tight control over who can access guest data, monitoring for unusual logins or message patterns, and a clear process for responding when an account may have been abused. The devices used to manage reservations, guest messages, invoices and payment-related emails should also be protected with reliable security protection. Some of the lures we observed were designed to make staff open attachments or documents that could install malware or steal credentials. In those cases, <a href="https://us.norton.com/antivirus" target="_blank">antivirus</a> or endpoint protection may be the last barrier before a compromised inbox becomes a compromised booking workflow.&nbsp;Payment-related communication deserves special attention. If a guest receives a payment or verification request, there should be a reliable way to confirm whether it is real. If an account is suspected of being compromised, guests need to be warned quickly and clearly.&nbsp;The reputational damage can be painful. Even when the property is also a victim, the traveler may remember the incident as “the hotel message that stole my card details.” That makes workflow security part of customer trust.&nbsp;<h3>What the wider travel ecosystem should learn&nbsp;</h3>Reservation Hijack scams sit between several parts of the travel industry. The booking platform may see unusual partner activity. The hotel may see confused guests. The traveler sees a convincing message. The bank sees card fraud. A security company sees the landing page.&nbsp;Each view is partial, and that delay helps the scam continue.&nbsp;The useful signals are often scattered: unusual partner logins, repeated payment-verification language, guest-message spikes, reused templates, fake landing pages, redirects, and infrastructure overlaps. Sharing those signals faster would make it easier to see when separate complaints are really part of the same operation.&nbsp;One compromised accommodation can look like a local incident. Hundreds of compromised accommodations across 50 countries point to a repeatable abuse model.&nbsp;<h3>The next phase of travel fraud&nbsp;</h3>Reservation Hijack scams exploit a simple mistake in how we judge trust online.&nbsp;Travelers think: “This message knows my booking, so it must be real.”&nbsp;Criminals know: “If we have the booking context, the victim will do much of the trust work for us.”&nbsp;The message does not have to be perfect. The website does not have to be flawless. The attacker does not need to convince the victim from zero. They only need to appear inside a relationship that already exists.&nbsp;Our latest data shows that this model has spread well beyond isolated cases. We identified 350 compromised accommodations across 50 countries, covering hotels, apartments, hostels, resorts, guesthouses, villas, and other accommodation types. Together, those properties represent a large travel footprint and millions of estimated annual guest interactions.&nbsp;The investigation is still ongoing. We are continuing to analyze infrastructure, campaign overlaps, and the clues suggesting connected activity behind parts of the operation.&nbsp;For travelers, the lesson is simple.&nbsp;Trust your booking. Do not automatically trust the message.&nbsp;

After our first report, Booking.com began warning customers that reservation data had been accessed. Our continuing investigation shows how criminals are using that data at scale. 

When Hotel Scams Know Your Booking: 350 Compromised Accommodations Across 50 Countries 

Threat Research Team

Attackers replaced selected official download links with malicious installers that deployed a Python bot, r77 rootkit components, and Windows policy-based defense evasion.On May 6, 2026, attackers compromised the official JDownloader website and swapped download links to serve trojanized installers. The JDownloader developers <a href="https://www.reddit.com/r/jdownloader/comments/1t6goqe/is_the_website_hacked/">confirmed the breach</a> within hours, restored clean files, and disclosed a timeline, but acknowledged they didn't know what the malicious installers actually do. We took the malware apart to answer that question.&nbsp;What we found goes well beyond a typical trojanized installer. The payload is a multi-component attack framework: a Python bot protected by PyArmor v9, an r77 rootkit stager with AMSI bypass, and a Windows Defender Application Control (WDAC) policy that blocks 50 security executables from running, including Avast, AVG, Avira, Windows Defender, HitmanPro, and Kaspersky Virus Removal Tool. We reversed the full C2 protocol from the obfuscated Python bytecode and recovered the campaign configuration from the dropper's encrypted strings.&nbsp;<h2>The infection chain</h2>The trojanized installer is unsigned. Windows SmartScreen blocks it, and users who ran it had to manually bypass the warning. Inside, it wraps the legitimate JDownloader installer alongside an XOR-encrypted second-stage PE:

Stage 2 acts as the campaign's quartermaster. It deploys five components from XOR-encrypted resources embedded in its PE (key: <code>fywo</code>):<table class="table"><thead><tr><th>Component</th><th>Purpose</th></tr></thead><tbody><tr><td>PyArmor bot</td><td>The main payload, a Python script with obfuscated bytecode</td></tr><tr><td>PyArmor runtime</td><td>DLL that decrypts the bot's bytecode at execution time</td></tr><tr><td>r77 rootkit stager</td><td>Native x86 PE that hides the bot's process, files, and registry keys</td></tr><tr><td>WDAC Code Integrity policy</td><td>Blocks 50 AV/EDR executables from running after reboot</td></tr><tr><td>Python 3.14.3 installer</td><td>The legitimate Python runtime (needed to run the bot)</td></tr></tbody></table>Before doing any of this, Stage 2 calls <code>WaitForSingleObject</code> with a 300-second timeout — three times in sequence. This 5-minute-per-call delay is designed to outlast automated sandboxes, which typically give samples 2-5 minutes of execution time. One sandbox vendor recorded an 8-minute total wait before any malicious behavior appeared.&nbsp;<h2>Killing your antivirus before it can fight back</h2>The most operationally significant component is the WDAC Code Integrity policy.Windows Defender Application Control (WDAC) policies tell the operating system which executables are allowed to run. The attackers deploy a deny-list policy to <code>%WINDIR%\System32\CodeIntegrity\SIPolicy.p7b</code> that blocks 50 executable paths across six security vendors plus core Windows security services:<table class="table"><thead><tr><th>Target</th><th>Blocked executables</th></tr></thead><tbody><tr><td>Avast</td><td>AvastSvc.exe, AvastUI.exe, afwServ.exe, aswEngSrv.exe, aswidsagent.exe, aswToolsSvc.exe, wsc_proxy.exe, Icarus components, Overseer</td></tr><tr><td>AVG</td><td>All executables under Program Files\AVG\Antivirus</td></tr><tr><td>Avira</td><td>Security, VPN, Fallback Updater, Optimizer Host, Endpoint Protection SDK</td></tr><tr><td>Windows Defender</td><td>MsMpEng.exe, MpCmdRun.exe, MpDefenderCoreService.exe</td></tr><tr><td>Windows Security</td><td>SecurityHealthHost.exe, SecurityHealthService.exe, SecurityHealthSystray.exe</td></tr><tr><td>Windows Update</td><td>MoUsoCoreWorker.exe, wuauclt.exe, wusa.exe</td></tr><tr><td>Others</td><td>HitmanPro, Kaspersky Virus Removal Tool, Farbar Recovery Scan Tool</td></tr></tbody></table>After the next reboot, none of these executables can start. The AV service is effectively dead. It won't run, it can't scan, and Windows Update can't push signature updates. One victim in the Reddit thread reported that Windows Defender disappeared entirely after running the trojanized installer.This is a known but uncommon TTP (MITRE T1562.001). It requires the installer to run elevated, which the SmartScreen bypass dialog would have prompted for. Users who clicked through both warnings — SmartScreen and UAC — gave the malware everything it needed.<h2>&nbsp;</h2><h2>How the dropper provisions the bot</h2>Stage 2's strings are all XOR-obfuscated with the same <code>fywo</code> key used for its resources. After deobfuscation, we recovered 122 strings including registry paths, API names, and encrypted configuration values.The dropper writes the bot's initial configuration to <code>HKCU\SOFTWARE\Python</code>. Both the registry value names and data are RC4-encrypted and hex-encoded — making the registry entries look like random hex strings to casual inspection. We recovered two configuration values:<ul><li data-list-item-id="e15e9100cccadef17d91598e244b0b038">CampaignID a unique identifier for this campaign, used during bot registration with the C2 server.</li><li data-list-item-id="e7a2666057614636498fba93e483028cf">DDRList six dead-drop resolver URLs that the bot uses to discover its C2 servers (detailed in the next section).</li></ul>Notably, the dropper does not write a C2 server list directly. The bot discovers its command-and-control addresses exclusively through the dead-drop resolver mechanism — a design choice that makes the infrastructure resilient to takedowns.&nbsp;<h2>Dead-drop resolvers: how the bot finds its C2</h2>A dead-drop resolver (DDR) is an intermediary, a legitimate web page where the operator publishes encrypted C2 addresses. The bot fetches the page, extracts and decrypts the content, and connects to whatever C2 servers it finds. If the operator needs to rotate infrastructure, they update the DDR page and every infected machine follows automatically.The bot reads its DDR list from the registry, fetches each URL, and RC4-decrypts the page content. Valid payloads start with the prefix <code>VAL:</code> followed by a semicolon-separated list of C2 URLs.We extracted all six dead-drop resolver URLs from the dropper and probed them:<table class="table"><thead><tr><th>URL</th><th>Status</th><th>Decrypted content</th></tr></thead><tbody><tr><td><code>telegra[.]ph/tr02-05-02</code></td><td>Live</td><td>C2 list: parkspringshotel[.]com + auraguest[.]lk</td></tr><tr><td><code>telegra[.]ph/ki06-05-02</code></td><td>Live</td><td><code>VAL:XX</code> — placeholder for future C2 rotation</td></tr><tr><td><code>rentry[.]co/zzk7opdu</code></td><td>Live</td><td>Same C2 list</td></tr><tr><td><code>rentry[.]org/wayc2qqz</code></td><td>Live</td><td><code>VAL:XX</code> — placeholder</td></tr><tr><td><code>codeberg[.]org/etienne74/guix/...</code></td><td>404</td><td>Removed or never created</td></tr><tr><td>`2wxjoz6lkdxkniksujbdknkugweemx7uvxdr4ejgyipce4tnvktvbvqd.onion/t`</td><td>Not probed</td><td>Tor hidden service DDR</td></tr></tbody></table>The operator has two live C2 servers and four reserve dead-drop pages — two stubs ready for C2 rotation and one Tor fallback. If the current C2 infrastructure gets burned, the operator updates a Telegraph or Rentry page and every infected machine picks up the new address on its next poll cycle.Beyond the dead-drop mechanism, the bot has a domain generation algorithm (DGA) as a last-resort fallback. It combines four seeds (<code>XNerWs4I</code>, <code>e55gegnW</code>, <code>RjWN0Y9m</code>, <code>AemOU1co</code>) with 14 TLDs and an ISO-week-based rotation to produce 56 candidate domains per week. We probed all current DGA domains — none are registered. The operator is running purely on dead-drop infrastructure for now, but the DGA ensures the botnet can survive even if all resolver pages and C2 servers are taken down simultaneously.&nbsp;<h2>The C2 protocol: RSA-OAEP wrapping AES-GCM</h2>We reversed the bot's full communication protocol from the PyArmor-protected bytecode. It uses a layered encryption scheme designed to prevent passive interception and session tampering:

The bot wraps a fresh AES-256 key with the hardcoded RSA-2048 public key (OAEP, SHA-256) and sends it to the C2. The server proves possession of the private key by returning <code>"ok"</code> encrypted with AES-GCM. From that point, every message in both directions is AES-256-GCM encrypted with a per-direction sequence counter as authenticated associated data — preventing replay and reordering.After the handshake, the bot registers with the campaign ID provisioned by the dropper. The server returns a <code>bot_id</code> and <code>bot_pass</code> that the bot stores in the registry for subsequent polling. The bot's primary capability is arbitrary Python code execution — the attacker can ship any Python code and the bot will run it and return the output.All identified C2 and staging servers are compromised <a href="https://qloapps.com/">QloApps</a> hotel reservation websites:<table class="table"><thead><tr><th>Domain</th><th>Role</th><th>IP</th><th>PHP</th><th>Location</th></tr></thead><tbody><tr><td><code>parkspringshotel[.]com</code></td><td>C2 panel</td><td>172.96.172[.]91</td><td>8.3.30</td><td>Ghana</td></tr><tr><td><code>auraguest[.]lk</code></td><td>C2 panel</td><td>209.133.215[.]178</td><td>8.3.30</td><td>Sri Lanka</td></tr><tr><td><code>checkinnhotels[.]com</code></td><td>Linux payload staging</td><td>66.29.137[.]25</td><td>7.4.33</td><td>—</td></tr></tbody></table>The two C2 servers share identical JARM fingerprints and run the same PHP version, confirming the same C2 panel software is deployed on both. The third domain, <code>checkinnhotels[.]com</code>, was used to host the Linux payload disguised as an SVG file (<a href="https://www.bleepingcomputer.com/news/security/jdownloader-site-hacked-to-replace-installers-with-python-rat-malware/">BleepingComputer</a>). All three run QloApps — an open-source hotel booking CMS — suggesting the attacker specifically targets this software to build their infrastructure. None of the domains had malicious detections on VirusTotal at the time of discovery. We confirmed both C2 servers remain operationally live as of May 11.<h2>&nbsp;</h2><h2>The r77 rootkit stager</h2>The rootkit stager is a 176 KB native x86 PE based on the open-source <a href="https://github.com/bytecode77/r77-rootkit">r77 rootkit</a>. It contains an embedded .NET assembly that performs four operations:<ol><li data-list-item-id="e9ca3772c2bd6052d86931268e23d036a">AMSI bypass — a PowerShell cradle patches <code>AmsiScanBuffer</code> in memory, disabling Windows' Antimalware Scan Interface before any script payload runs.</li><li data-list-item-id="e01c27cd4c721b2dabe18b819d05c84fe">Reflective DLL injection — injects the r77 hooking DLLs (32-bit and 64-bit variants) into <code>winlogon.exe</code>. These DLLs hook Windows API functions to hide any process, file, or registry key whose name starts with the <code>$77</code> prefix.</li><li data-list-item-id="e254d7da7ebd6dfd7d57f7c5f67760ba3">Registry persistence — stores the stager assembly as a binary blob in <code>HKLM\SOFTWARE\$77stager</code> and reloads it at every boot via .NET reflection.</li><li data-list-item-id="ef200c38559748bd535edaf6a0d5aa3d5">Service creation — installs a Windows service (<code>$77svc</code>) to ensure the rootkit survives reboots independently of the registry mechanism.</li></ol>Once r77 is active, the <code>$77</code> prefix acts as an invisibility cloak. The Python bot calls <code>r77_hide_self()</code> and <code>r77_hide_registry_path()</code> to rename its own process and registry hive with this prefix, making them invisible to Task Manager, <code>regedit</code>, and most security tools.<h2>&nbsp;</h2><h2>The Python bot under PyArmor v9</h2>The final payload is a Python script protected by <a href="https://pyarmor.dashingsoft.com/">PyArmor</a> v9, a commercial bytecode obfuscation tool. PyArmor encrypts each function's bytecode individually and decrypts it at runtime through a native DLL — making static analysis significantly harder than standard Python malware.We built a custom tool to decrypt and disassemble the protected bytecode, recovering 30 functions totaling 7,326 lines of disassembly. The bot is cross-platform (Windows and Linux), uses gevent for asynchronous I/O, and handles the full lifecycle: configuration management, C2 discovery via dead-drop resolvers and DGA, encrypted communication, task execution, and rootkit integration.The bot's primary capability is executing arbitrary Python code received from the C2 server. Combined with the Python 3.14 runtime installed by the dropper, this gives the operator the ability to deploy any follow-on payload — keyloggers, credential stealers, lateral movement tools — without needing to push new binaries to the victim.<h2>&nbsp;</h2><h2>Impact and recommendations</h2>Users who downloaded JDownloader from the official website between May 6 and May 7, 2026, using the "Download Alternative Installer" links (Windows) or the Linux shell installer link are potentially compromised. The <a href="https://jdownloader.org/incident_8.5.2026.html">official incident report</a> lists eight malicious installer hashes across x86/amd64 and multiple JRE versions. The attackers exploited an unpatched CMS vulnerability to swap download links — the actual installer files hosted externally were never modified. In-app updates, macOS downloads, and package manager installs (Flatpak, Winget, Snap) were not affected.The Linux attack chain, [first reported by BleepingComputer](https://www.bleepingcomputer.com/news/security/jdownloader-site-hacked-to-replace-installers-with-python-rat-malware/), follows a different delivery path. We downloaded the trojanized shell installer and its payload to verify the claims and dig deeper.d. The modified install4j script requires root, checks for x86_64 architecture, and downloads a 20 MB tar.gz from <code>checkinnhotels[.]com/img/logo1.svg</code> (disguised with <code>Content-Type: image/svg+xml</code> — still live as of May 11). The archive contains two files: a 3 KB SUID-root helper (<code>systemd-exec</code>) and a 21 MB PyInstaller bundle (<code>pkg</code>). The helper is a minimal ELF that calls <code>setuid(0)</code>, <code>setgid(0)</code>, and <code>execvp()</code> — installed to <code>/usr/bin/systemd-exec</code> with <code>chmod 4755</code>. Persistence is created via <code>/etc/profile.d/systemd.sh</code>, which launches the payload masquerading as <code>/usr/libexec/upowerd</code>.We decrypted the PyArmor-protected Python bytecode from the Linux payload and confirmed it is the same bot source code as the Windows variant — identical RSA public key, DGA seeds, RC4 keys, C2 protocol, and DDR handler logic. The same campaign ID (<code>NdcHsJPM</code>) and all six DDR URLs are written to <code>~/.local/share/</code> as RC4-encrypted files (mirroring the Windows registry approach). The only difference is the Python runtime: the Linux bundle uses Python 3.12 (packaged via PyInstaller) versus Python 3.14 on Windows.The JDownloader developers restored clean downloads on May 9 and published a detailed incident timeline. Users who already had JDownloader installed and received updates through the application's built-in updater were not affected — only fresh downloads from the website during the compromise window were trojanized.If you ran the trojanized installer:<ul><li data-list-item-id="e78c8637f87f47adb2a6c0e9e37ff1466">The WDAC policy may have disabled your antivirus. Check <code>%WINDIR%\System32\CodeIntegrity\SIPolicy.p7b</code> — if it exists and you didn't create it, delete it and reboot.</li><li data-list-item-id="e5a9344602452a9e77dfe81e30c45fd8c">The registry keys <code>HKCU\SOFTWARE\Python</code> (bot config) and <code>HKLM\SOFTWARE\$77stager</code> (rootkit) are strong indicators of compromise — but if r77 is active, its API hooks hide all <code>$77</code>-prefixed registry keys and the bot's own hive from standard tools like <code>regedit</code>. To inspect these, boot from a Windows recovery environment or mount the registry hives offline.</li><li data-list-item-id="edcbc2f271c7b2885893f8f995fe252eb">A clean OS reinstall is the safest remediation. The r77 rootkit's reflective injection into <code>winlogon.exe</code> and AMSI bypass make partial cleanup unreliable.</li></ul>For defenders:<ul><li data-list-item-id="efcd7ce434d65f159da0dbff097d5fb44">The bot uses the default Python User-Agent <code>Python-urllib/3.14</code>. While not unique on its own, it can help correlate connections to the C2 URLs and DDR pages listed below.</li><li data-list-item-id="e35fe4757c01a79131defbd71e6762bfb">Monitor for DNS queries to the DGA pattern: 15-character lowercase alphanumeric hostnames on TLDs including <code>.top</code>, <code>.cfd</code>, <code>.sbs</code>, <code>.cyou</code>, <code>.icu</code>, <code>.casa</code>.</li><li data-list-item-id="e41ab2df0dd210b9e338012701bdf4398">The mutex name <code>Global\0C3C1D37</code> can serve as a host-based indicator.</li><li data-list-item-id="e68e99d7961368cd02568989f8e767d08">Block the dead-drop resolver pages: <code>telegra[.]ph/tr02-05-02</code>, <code>telegra[.]ph/ki06-05-02</code>, <code>rentry[.]co/zzk7opdu</code>, <code>rentry[.]org/wayc2qqz</code>.</li></ul><h2>&nbsp;</h2><h2>Indicators of Compromise</h2>Full IOC list available on <a href="https://github.com/avast/ioc">GitHub</a>.<h3>Hashes (SHA-256)</h3><table class="table"><thead><tr><th>Artifact</th><th>Hash</th></tr></thead><tbody><tr><td>Stage 1 — Windows (analyzed variant)</td><td><code>5a6636ce490789d7f26aaa86e50bd65c7330f8e6a7c32418740c1d009fb12ef3</code></td></tr><tr><td>Stage 1 — Linux shell installer</td><td><code>6d975c05ef7a164707fa359284a31bfe0b1681fe0319819cb9e2c4eec2a1a8af</code></td></tr><tr><td>Stage 2 (C++ dropper)</td><td><code>77a60b5c443f011dc67ace877f5b2ad7773501f3d82481db7f4a5238cf895f80</code></td></tr><tr><td>Stage 3 — Windows (PyArmor bot)</td><td><code>5fdbee7aa7ba6a5026855a35a9fe075967341017d3cb932e736a12dd00ed590a</code></td></tr><tr><td>PyArmor runtime DLL</td><td><code>33318499489cdb82543c0bfea699b98f5928c7a360966df6e958a9cbc2eab3fe</code></td></tr><tr><td>r77 rootkit stager</td><td><code>5c887054cb1dce077943afa955db43306f66795f7cbda8233d8ba25230a23d41</code></td></tr><tr><td>WDAC CI policy</td><td><code>5ee86c177dc5bdba05e3bdc67b07115c66097f825fff257bf0d4a999bbb8a1ea</code></td></tr><tr><td>Linux payload archive (logo1.svg)</td><td><code>6550672cac21e036882921dd934ee06552dc74d3b0a9e1ddc26f952855e11371</code></td></tr><tr><td>Linux SUID helper (systemd-exec)</td><td><code>25744e90bfa44cbcbf1f3d3c3cb90dd79dd32a6e359df9d2660ff251d6d03b46</code></td></tr><tr><td>Linux PyInstaller bot (pkg)</td><td><code>bf47585bd0b39f0731f044b37a95eb7e311ad31b23b50306a113a3aa777dbfab</code></td></tr></tbody></table>Six additional Windows installer variants are listed in the <a href="https://jdownloader.org/incident_8.5.2026.html">official incident report</a>. Full hash list on <a href="https://github.com/avast/ioc/tree/master/JDownloaderRAT">GitHub</a>.<h3>Network indicators</h3><table class="table"><thead><tr><th>Type</th><th>Value</th><th>Context</th></tr></thead><tbody><tr><td>C2 URL</td><td><code>parkspringshotel[.]com/m/Lu6aeloo.php</code></td><td>Active C2</td></tr><tr><td>C2 URL</td><td><code>auraguest[.]lk/m/douV2quu.php</code></td><td>Active C2</td></tr><tr><td>Staging</td><td><code>checkinnhotels[.]com/img/logo1.svg</code></td><td>Linux payload (still live)</td></tr><tr><td>C2 IP</td><td><code>172.96.172[.]91</code></td><td>parkspringshotel.com</td></tr><tr><td>C2 IP</td><td><code>209.133.215[.]178</code></td><td>auraguest[.]lk</td></tr><tr><td>Staging IP</td><td><code>66.29.137[.]25</code></td><td>checkinnhotels.com</td></tr><tr><td>Dead-drop resolver</td><td><code>telegra[.]ph/tr02-05-02</code></td><td>Live, serves encrypted C2 list</td></tr><tr><td>Dead-drop resolver</td><td><code>rentry[.]co/zzk7opdu</code></td><td>Live, serves encrypted C2 list</td></tr><tr><td>Dead-drop resolver</td><td><code>telegra[.]ph/ki06-05-02</code></td><td>Stub, reserved for C2 rotation</td></tr><tr><td>Dead-drop resolver</td><td><code>rentry[.]org/wayc2qqz</code></td><td>Stub, reserved for C2 rotation</td></tr></tbody></table><h3>Host indicators</h3><table class="table"><thead><tr><th>Type</th><th>Value</th></tr></thead><tbody><tr><td>Mutex</td><td><code>Global\0C3C1D37</code></td></tr><tr><td>Registry (bot config)</td><td><code>HKCU\SOFTWARE\Python\*</code> (hex-encoded RC4-encrypted value names)</td></tr><tr><td>Registry (r77)</td><td><code>HKLM\SOFTWARE\$77stager</code>, <code>$77dll32</code>, <code>$77dll64</code>, <code>$77svc</code></td></tr><tr><td>WDAC policy</td><td><code>%WINDIR%\System32\CodeIntegrity\SIPolicy.p7b</code> (GUID <code>{31351756-3F24-4963-8380-4E7602335AAE}</code>)</td></tr><tr><td>Bot process</td><td><code>pythonw.exe</code> (Python 3.14, User-Agent <code>Python-urllib/3.14</code>)</td></tr><tr><td>Tor drop path</td><td><code>C:\ProgramData\tor\tor\tor.exe</code></td></tr><tr><td>Linux SUID binary</td><td><code>/usr/bin/systemd-exec</code></td></tr><tr><td>Linux payload</td><td><code>/root/.local/share/.pkg</code></td></tr><tr><td>Linux persistence</td><td><code>/etc/profile.d/systemd.sh</code></td></tr><tr><td>Linux masquerade</td><td><code>/usr/libexec/upowerd</code></td></tr></tbody></table><h3>MITRE ATT&amp;CK</h3><table class="table"><thead><tr><th>Technique</th><th>ID</th></tr></thead><tbody><tr><td>Supply Chain Compromise: Compromise Software Supply Chain</td><td>T1195.002</td></tr><tr><td>Obfuscated Files or Information</td><td>T1027</td></tr><tr><td>Impair Defenses: Disable or Modify Tools</td><td>T1562.001</td></tr><tr><td>Process Injection: Dynamic-link Library Injection</td><td>T1055.001</td></tr><tr><td>Web Service: Dead Drop Resolver</td><td>T1102.001</td></tr><tr><td>Dynamic Resolution: Domain Generation Algorithms</td><td>T1568.002</td></tr><tr><td>Encrypted Channel: Asymmetric Cryptography</td><td>T1573.002</td></tr><tr><td>Rootkit</td><td>T1014</td></tr><tr><td>Create or Modify System Process: Windows Service</td><td>T1543.003</td></tr><tr><td>Modify Registry</td><td>T1112</td></tr></tbody></table>For customers using Norton, Avast, AVG, Avira or any other security product, the most important question is whether the malicious installer was executed. If you downloaded an affected installer but did not run it, delete the file, download a fresh installer from the official JDownloader site, and run a full scan with up-to-date protection. If you ran the installer, or cannot rule out that you ran it, treat the system as compromised. JDownloader recommends a clean operating system reinstall in this situation, and we agree that this is the safest baseline. The Windows payload includes rootkit behavior, persistence, encrypted configuration and policy-based defense evasion, so a normal scan may reduce risk but cannot guarantee that every persistence mechanism has been removed. Until the system has been rebuilt or inspected from a trusted recovery environment, avoid using it for sensitive activity. Do not log in to email, banking, work accounts, password managers or other important services from that machine. Change important passwords from another trusted device, and monitor accounts for unusual activity.&nbsp;

Malware that hid itself on infected systems and disabled antivirus protection.

Inside the JDownloader Supply-Chain Attack: An r77 Rootkit Bot That Kills Your Antivirus

As the digital landscape rapidly evolves, so do the risks associated with it. Among the growing concerns are AI-generated content and deepfakes, which are progressively being used to deceive and manipulate. While AI-generated images and deepfakes are drawing attention in the political landscape, their influence stretches far beyond, affecting everything from self-perception to trust in media.&nbsp;The <a href="https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3523329/nsa-us-federal-agencies-advise-on-deepfake-threats/">National Security Agency</a> have classified deepfakes as a significant threat due to their potential to synthetically create or manipulate multimedia. This concern has driven some states, such as California and Texas, to enact laws against the malicious use of deepfakes. Similarly, the rise of AI-generated images has highlighted the importance of addressing these threats. Tools like Elon Musk’s new Grok chatbot, which in certain <a href="https://aibusiness.com/chatbot/grok-2-generates-controversy-expert-reactions">instances</a>, has produced highly convincing yet deceptive content, highlighting the need for strong technological and ethical guardrails.&nbsp;<h3>Viral Misinformation with Real-Life Examples&nbsp;</h3>Recent cases showcase how sophisticated AI-generated content can be:&nbsp;<ul><li>A <a href="https://apnews.com/article/trump-taylor-swift-fake-endorsement-ai-fec99c412d960932839e3eab8d49fd5f">fabricated image</a> of singer Taylor Swift endorsing former President Donald Trump going viral on social media.&nbsp;&nbsp;</li><li>An <a href="https://www.nytimes.com/interactive/2024/08/14/technology/elon-musk-ai-deepfake-scam.html">AI-generated deepfake</a> of Elon Musk endorsing a fake investment scheme circulated online, tricking people into believing he was involved.&nbsp;&nbsp;</li></ul>These examples show the potential for AI to be utilized with the intent to manipulate, whether it's in the instance of negatively influencing political opinions, spreading scams or even damaging reputations.&nbsp;AI-generated content, including filters used by celebrities to smooth skin or alter body shapes, can damage self-esteem. <a href="https://www.scmp.com/magazines/style/entertainment/article/3256215/13-times-celebrities-caused-controversy-edited-photos-besides-kate-middletons-mothers-day-photoshop">Here</a> is an article highlighting examples of controversial edited photos shared by major celebrities like Kim Kardashian and Ariana Grande. Some platforms like Instagram are even now labeling AI-generated content for greater transparency, showcasing these photos as a potential risk to self-worth. AI-generated content can also damage reputations. A notable example is when <a href="https://www.nytimes.com/2024/02/05/business/media/taylor-swift-ai-fake-images.html">deepfakes of Taylor Swift</a> featuring explicit content circulated earlier this year. Images like these can set unattainable standards, leading to body image issues.&nbsp;<h3>Tips for Identifying&nbsp;</h3>Here are some guidelines for spotting AI-generated and deepfake scams:&nbsp;<ol><li>Unnatural eye movement and facial expressions: Watch for unusual eye movements, blinking or gaze, as facial expressions might seem delayed or out of sync.&nbsp;</li><li>Lack of emotion: Be alert for robotic or emotionless speech, where the tone doesn’t align with the words or situation.&nbsp;</li><li>Features that don’t look real: Look for inconsistencies, such as distorted edges around the face, unnatural lighting or blurred details.&nbsp;</li><li>Untrustworthy sources: Evaluate the credibility of the source and verify information by cross-checking with multiple alternative trusted sources.&nbsp;</li></ol>As AI-generated content and deepfakes challenge trust and authenticity, Gen remains committed to safeguarding digital freedom. We aim to stay ahead of threats and equip people with the knowledge and tools they need to stay Cyber Safe amid new and emerging threats. By educating people and enhancing our cybersecurity measures, we strive to uphold the integrity of our digital world. Together, we can navigate evolving challenges, such as misinformation, and ensure a safer online experience.&nbsp;&nbsp;&nbsp;For more guidance on staying safe in the age of deepfakes, click <a href="https://us.norton.com/blog/emerging-threats/what-are-deepfakes">here</a>.&nbsp;&nbsp;

How deepfakes and AI-created content shape perceptions in today’s digital world

The Spread of AI-Generated Disinformation

Gen Threat Labs recently uncovered and reported a major security flaw known as a zero-day <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38193">vulnerability</a> (CVE-2024-38193), which Microsoft has now fixed. This repair is important because it addresses a security issue that was being used by the <a href="https://www.gendigital.com/blog/news/innovation/lazarus-group">Lazarus APT group</a>, a North Korean hacker group known for targeting specific professionals.&nbsp;What we found&nbsp;In early June, Luigino Camastra and Milanek discovered that the Lazarus group was exploiting a hidden security flaw in a crucial part of Windows called the AFD.sys driver. This flaw allowed them to gain unauthorized access to sensitive system areas. We also discovered that they used a special type of malware called Fudmodule to hide their activities from security software.&nbsp;Why it’s important&nbsp;The vulnerability allowed attackers to bypass normal security restrictions and access sensitive system areas that most users and administrators can't reach. This type of attack is both sophisticated and resourceful, potentially costing several hundred thousand dollars on the black market. This is concerning because it targets individuals in sensitive fields, such as those working in cryptocurrency engineering or aerospace to get access to their employer’s networks and steal crypto currencies to fund attackers’ operations.&nbsp;Patching the Issue&nbsp;The good news: <a href="https://www.techworm.net/2024/08/microsoft-patch-six-windows-zero-day.html#google_vignette">Microsoft has now issued a patch</a> to address the critical vulnerability. Thanks to our team's proactive efforts, we alerted Microsoft to this issue and provided detailed example code that helped them pinpoint and resolve the flaw effectively. This swift action has safeguarded all vulnerable Windows devices from potential attacks.&nbsp;For continued protection, it’s crucial for all Windows users to update their systems promptly and stay vigilant against potential threats.&nbsp;A Commitment to Global Cybersecurity&nbsp;At Gen, our commitment to digital freedom goes beyond just protecting our customers; it's about safeguarding the entire digital ecosystem. Through rigorous research and deep visibility into emerging threats, our cybersecurity team was able to uncover this critical vulnerability, bringing it to light before it could cause widespread harm. By sharing this information with Microsoft, they were able to patch this zero-day flaw; we’ve not only protected millions of Windows users worldwide but also reaffirmed our dedication to creating a safer digital future for all. This effort is a testament to our mission of empowering and protecting people everywhere, ensuring that everyone can navigate the digital world with confidence and security.&nbsp;

Gen identifies and helps fix a vulnerability exploited by a notorious hacker group, reinforcing global cybersecurity

Safeguarding Digital Freedom: How a Gen Discovery Helped to Protect Windows Users Everywhere 

A core belief in our ability to make the world a better, safer place is at the heart of everything we do at Gen. &nbsp;We’re committed to making a meaningful impact through strategic partnerships and hands-on initiatives. That’s why approximately 60% of the funding from the Gen Foundation (a corporate-advised fund of the Silicon Valley Community Foundation) is dedicated specifically to advancing Cyber Safety education and training. And empowering children all over the world is our primary focus. We engage with local communities and educate kids —one of the most vulnerable and digital generations ever.&nbsp;&nbsp;Recently, our Japanese marketing team, led by Risa Sakurai and Hiroshi Furuya, presented to 150 elementary school students in Tokyo. The session aimed to educate them all about Social Networking Services (SNS) scams and promote safe online practices as their lives become more and more digital.&nbsp; &nbsp;&nbsp;

“Empowering the next generation with the skills to navigate the digital world safely is crucial. Our recent presentation in Tokyo was a step towards ensuring that children understand the risks of SNS scams and how to protect themselves online,” said Risa Sakurai, GTM Marketing Specialist at Gen.&nbsp;The focus on SNS scams and digital safety was chosen because these platforms are commonly used by young people to communicate and share content. With the rise of digital interactions, children are particularly vulnerable to online scams, cyberbullying and privacy breaches. The kids were very engaged, asking questions, such as:&nbsp;<ul><li>When using a social networking site, what personal info is acceptable or not acceptable to put on the site?&nbsp;</li><li>What to do if they receive unwanted or inappropriate content?&nbsp;</li><li>How to set up privacy settings on their social media accounts?&nbsp;</li><li>How to recognize phishing attempts or suspicious messages?&nbsp;</li><li>If they get into trouble, how and whom should they talk to?&nbsp;</li></ul>The experience highlighted the importance of early education in digital safety and demonstrated the effectiveness of interactive and age-appropriate teaching methods. &nbsp;&nbsp;As we dive into the back-to-school season, we also want to spotlight some other focused Cyber Safety education impacts we’ve helped champion:&nbsp;&nbsp;Discovery Education&nbsp;<a href="https://www.discoveryeducation.com/">Discovery Ed</a> partners with educators to enhance digital safety through a multi-language platform called My Digital Life, co-branded with Norton. Launched in 2023, this comprehensive website provides teachers, students and parents with essential tools and resources to navigate the online world safely. The impact has been significant. From September to December 2023, My Digital Life reached over 102,000 students across 47 states and 712 school districts, including 62% Title I schools. Read more about our work with Discovery Ed <a href="https://www.gendigital.com/blog/impact/community/safer-internet-day-2024">here</a>.&nbsp;&nbsp;&nbsp;WAGGGS - World Association of Girl Guides and Girl Scouts&nbsp;Norton and WAGGGS have teamed up for over a decade, most recently launching <a href="https://www.wagggs.org/en/what-we-do/surf-smart-20/">Surf Smart 2.0</a>, an initiative designed to empower young women and girls with the tools they need to stay safe online. Surf Smart focuses on helping them recognize and address any feelings of insecurity, especially in relationships, and provides actionable steps to enhance their Cyber Safety. From April 2023 to April 2024, the program reached over 42,000 girls and young women. Read more about Gen’s involvement with Surf Smart . here.&nbsp;&nbsp;&nbsp;The Trevor Project&nbsp;<a href="https://www.thetrevorproject.org/">The Trevor Project</a> is dedicated to supporting LGBTQIA+ youth who are facing challenges such as suicidal thoughts and crises. Gen has recently collaborated with this initiative to provide essential tools and resources focused on online safety. We have helped build a <a href="https://www.thetrevorproject.org/resources/guide/online-safety-for-lgbtq-young-people/">Guide to Online Safety for LGBTQ+ Young People</a>, equipping young people with strategies to protect themselves online and offering guidance on how to combat and prevent online bullying.&nbsp;&nbsp;Moving Forward&nbsp;Last year alone, we reached 5.3 million people with Cyber Safety awareness and training. But there is always more work to be done.&nbsp;&nbsp;“We will continue to expand our outreach and collaborate with initiatives at Gen to ensure that everyone has the knowledge and tools they need to stay safe online,” said Kim Allman, Head of Corporate Responsibility and Public Policy at Gen.&nbsp;Through key initiatives and partnerships, we can help build a more secure digital world for all.&nbsp;

A Commitment to Cyber Safety and Global Partnerships Providing Education to Kids Worldwide

Empowering the Next Generation for a Safer Digital World 

Corporate Communication Specialist

We leverage the strength of our global team, knowing we’re more powerful together. Read news about Gen's company activities and initiatives.

Company News

Gen has a family of trusted consumer brands that for decades have helped people stay safe in the digital world. We pride ourselves in the trust we’ve built with people around the world to navigate the latest technology safely and with confidence. And that’s exactly why we recently launched the Gen Agent Trust Hub – our trust layer for the agentic AI ecosystem.AI agents are no longer theoretical. They are here. They are editing files, installing packages, calling APIs, connecting to MCP servers, spawning sub-agents, persisting memory, and executing real workflows across environments. This shift from passive AI to autonomous execution fundamentally expands the attack surface.The Agent Trust Hub (ATH) exists to meet this moment. It is designed to provide continuous protection across the full lifecycle of an AI agent – from identity and verification to runtime enforcement. But security at this scale cannot rely on proprietary guardrails alone. It requires shared foundations the industry can build on.To help establish that foundation, we created the AI Agent Safety Standards by Gen to serve as a unified framework designed to bring consistency, portability, and accountability to agentic systems. This framework is currently built on two complementary pillars:<ul type="disc"><li data-list-item-id="e464ce0354d35c1a986c83945bc06b0cd">AI Agent Runtime Safety Standard (AARTS) – an open standard for runtime decision enforcement across agent hosts</li><li data-list-item-id="e4a7d4ceb7039019b7c2554401a8bb1c3">Skill IDs – a deterministic, content-addressable fingerprinting system for AI agent skills</li></ul>Together, they enable the ATH and the broader agentic AI community to enforce trust not just within one environment but across the broader agentic ecosystem. &nbsp;Let’s dig into the details.&nbsp;<h2>Pillar One: Standardizing Runtime Safety for AI Agents</h2><h3>AARTS</h3>AI agents operate across a fragmented ecosystem of IDEs, orchestrators, frameworks, and standalone applications. Each host defines its own lifecycle events, security hooks, and enforcement logic.This fragmentation creates blind spots. A security engine integrated into one host may lack context or control in another, even when the risks are identical.AARTS&nbsp;addresses this gap. It is not a product. It is a vendor-neutral contract that defines:<ul type="disc"><li data-list-item-id="e226fc797549b56b0ae0a537923fd79f6">Where security decisions can be made (hook points)</li><li data-list-item-id="e7566ceb595a0278da9453bbd84659578">What data is available for evaluation (data model)</li><li data-list-item-id="e637f36bcc4e8dcfac7321ad59230c1c1">How decisions are enforced (verdict semantics)</li></ul>Simply put:&nbsp; AARTS standardizes runtime security decision-making across agent hosts.<h3>The Architecture</h3>AARTS defines three cleanly separated roles:<ol><li data-list-item-id="e7a445b9a896b9b89299afa17ca58c69e">Host Runs the agent, emits lifecycle events, and enforces decisions.</li><li data-list-item-id="e989b722cd161ff069c924d70571cd6b7">Adapter Maps host-native events into a standardized AARTS schema.</li><li data-list-item-id="ed862f4398b4b82c3b52c721801728a9c">Security Engine Evaluates events and returns structured verdicts.</li></ol>This separation prevents superficial “checkbox security” while preserving portability. Hosts provide the right context at the right time. Engines make decisions without depending on host internals.In ATH, this architecture allows enforcement logic to remain portable while enabling hosts to integrate in a predictable way.<h3>Hook Points: Where Safety Happens</h3>AARTS v0.1 defines 19 hook points across the agent lifecycle, including:<ul type="disc"><li data-list-item-id="ec5255705352d810833f77d79b310a42d">PreToolUse — evaluate shell commands, file writes, web requests, package installs</li><li data-list-item-id="ee1ebbdf3e4522a59dedaa55c0305d903">PreLLMRequest — protect prompt integrity and instruction layering</li><li data-list-item-id="e10ef155bfe4c584afd7492da267796be">PreSkillLoad / PrePluginLoad — enforce supply chain controls</li><li data-list-item-id="ee6184f1048dfbf4ee3c0e62c2d3dff16">PreMCPConnect — treat MCP connections as trust boundaries</li><li data-list-item-id="ebc57267bf0e891e01f9daf277ced1a01">PreMemoryRead / PreMemoryWrite — protect persistent memory</li></ul>These hooks enable consistent policy enforcement regardless of whether an agent runs in an IDE, CLI, or orchestrator.Verdict Semantics: Allow, Deny, AskAARTS engines return structured verdicts:<ul type="disc"><li class="ck-list-marker-bold" data-list-item-id="e9615d2d55e251652e73363c052de0bd1">Allow</li><li class="ck-list-marker-bold" data-list-item-id="eb510a0ee27b0a853b90ff01cec91953d">Deny</li><li class="ck-list-marker-bold" data-list-item-id="ed6e8c58ce99af62dddbf6b530bc0c83c">Ask</li></ul>Each verdict includes severity, threat category, optional confidence scoring, and human-readable reasoning.Importantly, AARTS enforces deterministic behavior:<ul type="disc"><li data-list-item-id="edfce7cb3a277e1da6e442c971f8cc8e1">If a host cannot support interactive “Ask,” it defaults safely to Deny</li><li data-list-item-id="ec790330b39c695d6cdacf4118e106c1b">If an engine fails, hosts fail-open and log explicitly</li></ul>These operational tradeoffs are intentional. Predictability is essential in security infrastructure.<h3>Why AARTS Matters</h3>Without a shared runtime contract:<ul type="disc"><li data-list-item-id="e2574817ec2bfc1a1b0233c5fca970994">Security integrations are bespoke and brittle</li><li data-list-item-id="ebbe5c354debe741cc08436719a34032e">Tool taxonomy is inconsistent</li><li data-list-item-id="e2f498a30e5d748e37c3176b169145707">Prompt injection controls vary by host</li><li data-list-item-id="e3aff5387909fd85f523c40998fdb13b0">Supply chain risk is unevenly enforced</li></ul>With AARTS:<ul type="disc"><li data-list-item-id="eaa8f402b20b740f0992dd0f9b4f42b44">One engine can operate across multiple hosts</li><li data-list-item-id="e3ddcda4fa65f1abd066be4b0bef0201b">Policies remain portable</li><li data-list-item-id="e5ec3076209374ae5eafb39a00f19adf4">Audit logs become comparable</li><li data-list-item-id="e6f17fa0cc0a6a6e0136b63569cdc58a6">Trust boundaries are explicit</li></ul>AARTS standardizes enforcement in the agentic world.To read the full technical breakdown, see the full AART&nbsp;<a href="https://www.gendigital.com/blog/news/company-news/ai-agent-runtime-security">technical blog post</a>. To comment on the standards, visit our page on&nbsp;<a href="https://github.com/gendigitalinc/aarts">GitHub</a>.<h2>Pillar Two: Skill IDs</h2><h3>Fingerprinting AI Agent Skills</h3>AI agents are extended through skills – directory bundles containing a SKILL.md prompt file alongside scripts, templates, configuration, and documentation.These skills function like plugins. Install one, and the agent gains new capabilities.But skills are not single files. They are directory trees.And directory trees are notoriously difficult to fingerprint reliably.<h3>The Identity Problem</h3>A naive SHA-256 hash of a ZIP file does not work:<ul type="disc"><li data-list-item-id="e6fc83ba16d130bd7d3d62ba2af79f96d">ZIP files are non-deterministic</li><li data-list-item-id="ee7939e0ca570cb480cbdc5b8e5460ece">Timestamps vary</li><li data-list-item-id="e5d398fbba0c41d53d0e3782902bce4c1">Entry order differs</li><li data-list-item-id="e95611c8e95e6ad4f16eccdede99ac42c">Unicode normalization differs across OS platforms</li><li data-list-item-id="ef8771bdef58d5438cc192edc36e89c56">Wrapper directory names vary</li></ul>Two identical skills can produce different ZIP hashes.That is unacceptable for security workflows.<h3>Designing the Skill ID</h3>Skill IDs solve this problem by creating a deterministic, content-addressable identifier for a skill’s logical directory tree.The algorithm:<ol><li data-list-item-id="ebdc8f7c1fc531f4ccbd79f2baf7b6d83">Extract all files and directories</li><li data-list-item-id="e06cf4d178c29a57575a249d22d5cb9b4">Normalize paths (slashes, Unicode NFC, dot components)</li><li data-list-item-id="e69f139d48a1c91815267ffb649c74e07">Strip wrapper directories</li><li data-list-item-id="e07c1da87b4b07a634d73a79ab93f9134">Hash each file individually (SHA-256)</li><li data-list-item-id="ef7cb735107df0cafdbcc921e639c0212">Build sorted tree entries using null-byte delimiters</li><li data-list-item-id="eab8b3782aab3b4dd9b0f4aed3255caf8">Hash the tree to produce the final Skill ID</li></ol>The result is a 64-character SHA-256 digest that changes if and only if meaningful content changes.Same content, different ZIP packaging? Same ID. One byte changed? Different ID.This mirrors git’s tree hashing model and decades of security best practices.<h3>What Skill IDs Enable</h3>A stable identity primitive unlocks established security workflows:Allowlisting Approved skills can bypass repeated analysis.Content-addressable storage Deduplicate identical submissions automatically.Per-file caching Reuse expensive AI analysis on unchanged files.Detection flagging Connect file hashes to reputation systems.Version tracking Content becomes the version boundary.Skill IDs provide identity before verdict.<h3>From Identity to Authenticity: Signing Skills</h3>Identity answers “what is this?”Authenticity answers “who published this?”We are exploring a signing model inspired by Authenticode:<ul type="disc"><li data-list-item-id="e2103c63753a0f24a87fa144d75611c7a">A skill.sig file embedded inside the directory</li><li data-list-item-id="e28e6643465e0cabeea54eb4bc5302028">Excluded from the Skill ID calculation</li><li data-list-item-id="e700fd96bf7f3d0db4aa70df0a92d57ec">Contains a signature over the Skill ID</li><li data-list-item-id="ea2483e766cae2defa9d2dd19707d9302">Verifiable against the author’s public key</li></ul>This enables:<ul type="disc"><li data-list-item-id="eddf73c0b79d7d482c030736b4f449be8">Author signing</li><li data-list-item-id="e3d708097518f6e38a31a73aaf27ecb49">Marketplace attestation</li><li data-list-item-id="e81ca5157252eece76405ff632c0d6722">Certificate chains</li><li data-list-item-id="efe336aa9f477f99f141fc5a81f887d9b">Revocation workflows</li></ul>Self-verifiable skills create accountability without external lookups.To read the full technical breakdown, see the full <a href="https://www.gendigital.com/blog/insights/research/ai-agent-skill-fingerprinting" target="_blank" rel="noreferrer noopener">SkillsID technical blog post</a>. To comment on the standards, visit our page on <a href="https://github.com/gendigitalinc/skill-id-standard">GitHub</a>.&nbsp;<h2>The AI Agent Safety Standards by Gen: Identity + Enforcement</h2>AARTS governs runtime enforcement. Skill IDs govern artifact identity.Together, they form the foundation of the AI Agent Safety Standards.<ul type="disc"><li data-list-item-id="ea3ef208939f34e4fcfaf98bd8e26b2d6">Skills can be uniquely identified, versioned, and signed.</li><li data-list-item-id="e30dceebd279e7a291dc71a82c7168ab2">Runtime actions can be evaluated consistently across hosts.</li><li data-list-item-id="e1a7b0d4259c4abb5e6ba2f38dffd6aaa">Supply chain trust and runtime enforcement operate under shared semantics.</li></ul>This is the same model that matured endpoint security over decades:<ul type="disc"><li data-list-item-id="ebacb70fb4a6565c103650a6c6ee67532">File hashes</li><li data-list-item-id="ed254dd1eec0c62e2aea6bce82e871995">Content signatures</li><li data-list-item-id="e37a3133a17b4a1adca017b868990baa6">Runtime enforcement</li><li data-list-item-id="eeeb5f5d7a84badb31f60600269d24edf">Portable policy engines</li></ul>We are applying those proven patterns to a new artifact type and a new execution model.<h2>Looking Ahead</h2>These standards are early. AARTS v0.1 is a draft. Skill ID signing is an evolving proposal. Adapter conformance testing, enterprise fail-open profiles, and cross-marketplace reputation sharing remain active areas of collaboration.But the direction is clear.AI agents are moving from experimentation to infrastructure. Security must do the same.The Gen Agent Trust Hub is our contribution to building a predictable, interoperable trust layer for the agentic ecosystem.&nbsp;We invite host builders, marketplace operators, enterprise security teams, and fellow security vendors to review, adopt, and challenge.Because in the agentic era, safety cannot be bespoke. It must be foundational.&nbsp;

Shaping the standards for a safer, freer Agentic Era 

Leading the Way for AI Agent Safety 

Director of Threat Research & Applied AI

We built a security engine that protects AI agents across several major platforms. The hardest part wasn't building the protection. It was discovering that each platform exposes different security-relevant events, provides different context about what the agent is doing and why, and enforces security decisions differently. The same agent action we can catch and block in one platform is invisible in another, not because our detection failed, but because the platform never told us it happened. There are now over a dozen agent platforms, from IDE assistants like Claude Code, Cursor, and GitHub Copilot, to agentic frameworks like LangChain, CrewAI, and OpenAI Agents SDK, to orchestrators like n8n, and each one handles this differently, if at all.Today, Gen is releasing AI Agent Runtime Safety Standard (AARTS) as part of its Agent Trust Hub initiative, which aimsto address this fragmentation. This is not a security product, but rather a set of vendor-neutral standards that connects agent hosts (IDEs, orchestrators, frameworks, standalone agent apps), security engines (components that evaluate agent actions), and adapters (thin mappings that translate host-native events into a common schema). For those building or operating agents, AARTS enables portable, consistent security decisions across hosts, eliminating the need to rebuild security integrations from scratch.&nbsp;The standard is open and vendor-neutral, and any host or security vendor can implement or contribute to it.<h2 class="text-align-justify">The Problem AARTS Addresses</h2>Agentic systems fail in ways that are familiar but occur more rapidly and with greater reach. Examples include sequences evolving from helpful actions to dangerous activities like&nbsp;"download and execute," prompt injection steering tool use, supply chain issues affecting skills and plugins, sensitive data exposure by agents, and permission confusion resulting from sub-agents and external tool providers creating additional trust boundaries. Although these risks are not new, they now manifest within a rapidly diversifying set of hosts and tool APIs.Without a shared contract, security becomes a collection of one-off integrations, each missing context and offering inconsistent enforcement. This leads either to weak coverage, due to incomplete integrations and context, or to overly blunt blocking when trust is undermined by limited interpretation. AARTS targets the root cause: the lack of shared semantics and hook points.In our previous&nbsp;<a href="https://www.gendigital.com/blog/news/company-news/ai-agent-detection-and-response" target="_blank">post on Agent Detection and Response</a>, we described how attackers register AI-hallucinated package names on npm and PyPI, preloaded with infostealers. Catching that requires seeing the package install action with enough context — the package name, the source, whether the agent hallucinated it or the user requested it. One platform gives us all of that. Another gives us the command string with no structured metadata. A third doesn't emit the event at all. Same attack, three different levels of visibility.Simply put, AARTS standardizes where security decisions can be made (hook points), what data is available for decision-making (data model), and how decisions are enforced (verdict semantics), ensuring consistent protections across different agent hosts.<h2 class="text-align-justify">Architecture and Roles</h2>AARTS defines three distinct roles:<ul type="disc"><li data-list-item-id="ef43f78807d68ed5d7cafc41e43ed6a77">Host: The environment that runs the agent. The host emits lifecycle events at defined hook points and enforces decisions.</li><li data-list-item-id="ea8ecfedda9151e1e4ff45954fc0bd003">Adapter: A minimal translation layer that maps host-specific events into AARTS events, normalizing tool names, lifecycle phases, and context.</li><li data-list-item-id="ec84e412023baa1359b60a4c189c0ce73">Security Engine: The evaluator that receives AARTS events, applies detection strategies, and returns structured verdicts.</li></ul>This separation matters. Embedding security logic in hosts results in superficial security ("checkbox security"), while engines depending on host internals compromise portability. AARTS keeps the boundary clean: hosts provide the right moments and context, and engines make decisions. AARTS also supports various integration models (in-process, subprocess, remote), accommodating different latency, isolation, and operational requirements.<h2 class="text-align-justify">How the Standard Works</h2>AARTS defines hook points, moments in an agent's lifecycle where a security engine can intercept, evaluate, and act. Version 0.1 specifies 19 of them across session management, prompt lifecycle, tool execution, plugin and skill loading, sub-agent behavior, memory operations, and output delivery.Not all hooks carry equal weight. Three illustrate the design logic:<ul type="disc"><li data-list-item-id="e9e499b9374a4cd1f71378518f359c0d6">PreToolUse is the primary checkpoint. Before an agent runs a shell command, writes a file, makes a network request, or installs a package, the security engine sees the action, its arguments, and the context that led to it, then returns a verdict: allow, deny, or ask the user. This is where most real-world threats get caught.</li><li data-list-item-id="ebd37c3ab71aca6ef9cddd1080d793f75">PreLLMRequest operates earlier in the loop, before the prompt reaches the model. It lets engines inspect prompt integrity: whether safety instructions survived context compaction, whether untrusted content was injected into the conversation, whether the instruction layering is intact. If PreToolUse is the checkpoint at the door, PreLLMRequest watches for problems before the agent even decides what to do.</li><li data-list-item-id="ecce291342cb701e4290928d827faf930">PreSkillLoad addresses supply chain risk. When an agent installs a plugin or skill from a marketplace, the engine can evaluate the trust source (where it came from, whether it's signed, whether it was modified) before it gets loaded. AARTS can also direct the host to strip hooks from skills, preventing plugins from disabling the security layer that's supposed to govern them.</li></ul>The remaining 16 hooks follow the same pattern: they sit at the moment where risk becomes real and provide the engine with enough context to make a decision.For those decisions to be portable across hosts, the inputs have to be consistent. AARTS standardizes the event structure: every event carries a mandatory envelope (hook point, session ID, timestamp, host identity) plus standard extensions, reusable field groups for conversation context, tool details, trust source metadata, modification tracking, and provenance. A canonical tool taxonomy maps host-specific tool names (Cursor's "terminal" vs. Claude Code's "bash") to common categories (shell, file_write, web_request, package_install), so detection logic written once works everywhere.Verdicts are structured: a decision (allow, deny, or ask), a threat category, a severity level, confidence, and a human-readable explanation for the user. Two design choices are worth noting. If the host can't prompt the user, ask falls back to deny, safe but a real constraint for headless orchestrators. If the engine crashes or times out, the host treats it as allow and logs the failure. Fail-open is the right default for developer tools where latency matters, but enterprise deployments will want to revisit this per environment.<h2 class="text-align-justify">Conformance Levels: Gradual Adoption</h2>AARTS defines three conformance levels:<ul type="disc"><li data-list-item-id="e18c7418214ef4f97b683f20402deb227">Level 1 (Basic): Requires SessionStart and PreToolUse hooks, minimum tool coverage (shell, file_write, web_request), enforcement of allow and deny (ask may be treated as deny).</li><li data-list-item-id="e0369d9837c299bdfd5a5c490fb899318">Level 2 (Standard): Adds plugin and skill load hooks, prompt lifecycle protection, broader tool coverage, additional hooks (PrePluginLoad, PreSkillLoad, PostInputProcessing, PreLLMRequest, PostToolUse), and requires provenance on PreToolUse.</li><li data-list-item-id="e31f70f735daa583aec2ef8c2d180686d">Level 3 (Comprehensive): Provides full lifecycle coverage including user input, prompt response cycle, tool modification, sub-agents, MCP connect, memory read/write, output delivery, and session end. Clarifies sub-agent inheritance and memory protection.</li></ul>This tiered approach offers a realistic adoption path: Level 1 addresses basic failures, Level 2 tackles prompt integrity and supply chain issues, and Level 3 supports persistent and autonomous agents.<h2 class="text-align-justify">Open&nbsp;Considerations</h2>As we move AARTS beyond a draft specification,&nbsp;the following are being considered:<ul type="disc"><li data-list-item-id="ef56e3529222a5671c75f8e80fbc5c2c9">Enterprise fail-open story: The spec mandates fail-open behavior. Deployment profiles may be needed to reflect the realities of different environments.</li><li data-list-item-id="e5e2beee0ceee16ba315173c83dcc4596">Adapter integrity: Ensuring adapters correctly map tool types and extract artifacts is vital. A conformance test suite for adapters is as important as the specification itself is a next-step priority.</li><li data-list-item-id="eea2912c8ee60ab64a8339e4d3c2b5748">Consent for privacy: Explicit consent is required for external transmission of prompts and tool data. Operational guidance or recommended patterns are needed to avoid incompatible implementations.</li><li data-list-item-id="e7dbd49139e599330dbad43c59209bc82">Ask semantics in headless environments: Treating ask as deny by default is safe but may discourage engines from using ask. A standard way for deployment policy to handle ask in these scenarios is needed.</li></ul>AARTS aims to translate&nbsp;these considerations into predictable operational behavior.<h2 class="text-align-justify">Call for Feedback</h2>AARTS v0.1 is a draft intended for early review by host builders, security vendors, and enterprise operators.&nbsp;The full specification is available <a href="https://github.com/gendigitalinc/aarts" target="_blank">here</a>. If you build agent hosts, consider whether you want every security integration to remain one-off. If you develop security engines, ask yourself whether you want to rewrite the same logic for each host and still miss critical context. AARTS aims to make the answer “no”.&nbsp;We welcome contributions — open an issue or submit a pull request.

AARTS standardizes how AI agent platforms expose security events, enabling portable runtime protection across the growing agent ecosystem

Introducing AARTS: An Open Standard for AI Agent Runtime Safety

You gave an AI agent access to your computer. Maybe it's writing code for you, managing your emails, or handling your finances. It's working with your credentials, acting on your behalf, and making decisions you used to make yourself. Fast, confidently, and largely unsupervised. That's the deal: you trade safety and oversight for productivity. That changes the security model.But who's watching what it actually does?That is why we built the Gen Agent Trust Hub (ATH), our trust layer for the agentic AI ecosystem, designed to secure agents across their lifecycle from skill to runtime to enforcement.Agent Detection and Response (ADR) is the runtime pillar — the layer that governs what agents actually do.<h2 class="text-align-justify">What is ADR?</h2>ADR intercepts agent actions at the moment of execution, before they land, and evaluates whether they're safe. It allows, asks the user, or denies. That's the core.Verification tells you what an agent is. ADR tells you what it's doing. These are complementary. Verification is necessary, but it can't govern what happens at runtime. A verified skill can still hallucinate a malicious package name. A signed plugin can still be exploited through prompt injection. A trusted agent can still lose its safety instructions mid-session and go off the rails. The moment of action is where risk becomes real.The principle isn't new. Every major computing paradigm has developed its own detection and response layer. Endpoints got EDR. Distributed infrastructure got XDR. Not replacements for what came before, but purpose-built layers for new execution surfaces with new threat models. AI agents are the next such surface, and ADR is the layer built for it.Within the Agent Trust Hub, ADR is the enforcement engine that turns trust signals into real-world protection.<h2>Why Now?</h2>The threats targeting AI agents are already here. What follows is a small sample of the agentic threats we’re seeing. The actual attack surface spans everything an agent can do, and agents can do a lot.Your agent installs malware for you. AI agents hallucinate. When they hallucinate a package name during installation, that's not just an error, it's an opportunity. Attackers monitor AI-suggested package names and register them on npm and PyPI, pre-loaded with infostealers and backdoors. The technique is called slopsquatting, and it's already being exploited at scale. In February 2026, researchers uncovered a campaign of&nbsp;<a href="https://www.securityweek.com/new-sandworm_mode-supply-chain-attack-hits-npm/">19 typosquatted packages specifically</a> targeting users of AI coding tools, designed to exfiltrate SSH keys, AWS credentials, and API tokens.Your agent ignores your instructions. Summer Yue, Meta's Director of Alignment, told her OpenClaw agent to&nbsp;<a href="https://techcrunch.com/2026/02/23/a-meta-ai-security-researcher-said-an-openclaw-agent-ran-amok-on-her-inbox/">confirm before taking any action</a> on her email. It worked, until the session ran long enough to trigger context compaction, a mechanism where the agent compresses its memory to keep running. The safety instructions were among the first things dropped. The agent deleted 847 emails. She had to physically run to her machine to stop it.Your agent is a new delivery channel for malware. Attackers are already using multiple paths to get malicious code running through agents. Weaponized skills on public marketplaces have delivered the&nbsp;<a href="https://x.com/GenThreatLabs/status/2018323584834318419">AMOS infostealer to macOS users</a>. Malicious project configurations have achieved&nbsp;<a href="https://research.checkpoint.com/2026/rce-and-api-token-exfiltration-through-claude-code-project-files-cve-2025-59536/">remote code execution in Claude Code</a> the moment a developer opens a repository. Prompt injection through fetched content can turn a trusted agent into an attacker's proxy. The delivery mechanisms vary. The result is the same: your agent executes something it shouldn't, and it does so with your permissions.These are just three examples. The pattern is consistent: agents operate with real authority, and that authority is being exploited. Through supply chains, through the agent's own fragility, and through the same malware ecosystem that has targeted every other computing platform before them.<h2>Where ADR Must Operate</h2>To be effective, ADR must sit as close to the agent's execution loop as possible. Not as an external service watching from the outside. Inside, where the actions happen.Agent sessions contain source code, credentials, business logic, and personal data. ADR evaluates locally, on the device. No prompts, tool inputs, or code leave your machine for analysis.Agents are not robust systems. Their own internal mechanisms can silently drop safety instructions or get poisoned across sessions. A security layer that only sees inputs and outputs misses the moment things go wrong inside. ADR watches the execution loop itself: every action the agent attempts, in context, in sequence.Only a client-side layer sees the complete picture: the prompt history, what files were already modified, the sequence of prior actions. A remote service sees isolated events. ADR sees the session. That difference is what makes it possible to distinguish a legitimate file deletion from a compromised agent cleaning up its tracks.<h2>Sage: ADR in Practice</h2>In February, we&nbsp;<a href="https://www.gendigital.com/blog/news/company-news/sage-ai-agent-security">open-sourced Sage</a> as the first implementation of ADR. It runs client-side, directly inside the agent's execution loop, across Claude Code, Cursor, and OpenClaw. Over 200 detection rules cover supply chain attacks, credential exposure, dangerous commands, persistence mechanisms, and more, backed by Gen's threat intelligence.Since launch,&nbsp;<a href="https://github.com/avast/sage/">Sage</a> has quickly crossed 1,000 installs and is available across the major agentic tool marketplaces. The open-source community is already contributing, porting Sage to new platforms like OpenCode and hardening detection rules. As one independent security researcher concluded after&nbsp;<a href="https://www.linkedin.com/pulse/paranoid-sage-testing-security-tool-agents-radek-hendrych-capff/">testing Sage</a>: "Real-time monitoring and management of AI agents based on deterministic measures is, in my view, the right way to go."All these responses confirm what we suspected: people want this layer.<h2>What's Next</h2>ADR is the runtime layer. But runtime protection alone isn't enough.&nbsp;The Agent Trust Hub is built on the idea that trust in the agentic era must be layered: verification before installation, ecosystem trust signals across marketplaces, and enforcement at execution. ADR closes the gap at the moment risk becomes real.&nbsp;The industry needs a common interface for how agents expose their actions to security tools. A shared standard, so that protection works consistently regardless of which agent you use or which platform you're on. We've been working on that too. More soon.

Inside the Gen Agent Trust Hub, ADR turns trust signals into real-world protection.

Gen Agent Trust Hub Introduces Agent Detection and Response: The Missing Security Layer for Agentic AI 

AI agents are starting to do the parts of computing that used to be “hands on keyboard”. They run terminal commands, edit files, install packages, and fetch things from the web, because that’s what it takes to get real work done. Tools like Claude Code, Cursor, and OpenClaw give these agents direct access to your machine and your sensitive information. That's what makes them useful. It's also what makes them risky. These agents make mistakes. They install packages that don't exist because they hallucinated the name. They pick up credentials and pass them where they shouldn't. They'll download and run programs from the internet without a second thought if the task seems to call for it. All of this happens fast, with confidence, and without asking. If you’ve watched an agent confidently suggest curl … | bash or “just add your API key here” into a file it shouldn’t touch, you’ve seen the problem.&nbsp;Agents are also targets. Malicious URLs, poisoned dependencies, and compromised plugins can turn an agent into an attack vector, one that already has access to your files, your terminal, and your network. This is already happening. <a href="https://x.com/GenThreatLabs/status/2018323584834318419" target="_blank" rel="noreferrer noopener">We recently identified</a> around 400 malicious skills on ClawHub, a public registry for agent extensions. At the time of discovery, they accounted for 12% of all available skills. These weren’t obviously shady throwaways; many were weaponized versions of legitimate skills, designed to trick agents into downloading malware.&nbsp;&nbsp;These are the same agents we're starting to trust with payments, infrastructure, and sensitive workflows. The gap between what agents can do and what keeps them in check is real, and it's growing.&nbsp;Today, Gen, the company behind Norton, Avast, LifeLock, and AVG, is releasing Sage to close that gap. With Sage, the Agent Trust Hub now evaluates and governs agent behavior during execution. Not just before installation. Not just at verification. But in the exact moment an action is about to happen.&nbsp;

<h2>What Sage does</h2>Think of Sage as a lightweight safety shield for AI agents. It sits inside the agent's workflow and checks every action before it happens: shell commands, URL fetches, file writes, package installs. For each action, Sage returns a verdict:&nbsp;<ul type="disc"><li data-list-item-id="e2aee30f293d4edf72390d310cdfa3f0e">Allow — no threat detected, the action proceeds&nbsp;</li><li data-list-item-id="e89d49ae9fae752dee97f089112c466b8">Ask — something looks suspicious, the user decides&nbsp;</li><li data-list-item-id="e44ca3f76876a9e666f2544e1233366ba">Deny — confirmed threat, the action is blocked&nbsp;</li></ul>The agent never notices unless something is wrong.&nbsp;Sage catches both sides of the risk. It protects agents from external threats like malicious URLs, compromised packages, and dangerous downloads. And it protects users from agents themselves, when they try to run destructive commands, expose credentials, or write to sensitive system files.&nbsp;Here's a concrete example. An agent automating a setup task decides to download and execute a script from the internet. No review, no confirmation. Sage recognizes the pattern and blocks it before anything runs.&nbsp;<h2 class="text-align-justify">Part of a larger commitment</h2>Sage is not a standalone effort. It’s part of a broader strategy to embed continuous trust into the AI skills ecosystem through the Gen Agent Trust Hub.&nbsp;&nbsp;The Skill Scanner of the <a href="https://ai.gendigital.com/agent-trust-hub" target="_blank" rel="noreferrer noopener">Gen Agent Trust Hub</a> helps determine whether an agent extension is trustworthy before it gets installed, using cloud-based verification and classification. Sage picks up where that leaves off. Once the agent is running, it enforces safety locally, on your machine, checking every action at the moment it's about to execute.&nbsp;&nbsp;Together, they cover the full lifecycle: from the decision to install something to the moment it actually runs. More capabilities are on the way as the agentic ecosystem grows.&nbsp;<h2 class="text-align-justify">Open source, on purpose</h2>The agentic platforms themselves are designed for open integration: open-source tools, community plugins, public hook APIs. A closed security layer would be harder to adopt in a space that moves fast and depends on community integrations.&nbsp;At the same time, there is no established playbook for how to secure AI agents. By open-sourcing Sage, we're proposing one and inviting the community to help define what safe agents should look like in practice.&nbsp;This first version is lightweight. It's not a full antivirus product as we know it, but it addresses the problems where they are. It covers the high-risk paths we think matter most: commands, file changes, URL fetches, and package installs, including catching hallucinated or malicious dependencies before they land on your machine. Sage ships with over 200 detection rules covering command injection, persistence, credential exposure, obfuscation, and supply-chain attacks.&nbsp;Sage currently supports Claude Code, Cursor, and OpenClaw, with more platforms on the way. If you find a detection that's too noisy or not strict enough, open an issue. If you want to add a rule, improve a check, or add support for another agent platform, send a pull request.&nbsp;We built Sage to be extended.&nbsp;&nbsp;<h2>Try it</h2>Learn more about Sage at <a href="https://ai.gendigital.com/sage" target="_blank" rel="noreferrer noopener">https://ai.gendigital.com/sage</a>. For technical details, documentation, and source code, visit the project on <a href="https://github.com/avast/sage" target="_blank" rel="noreferrer noopener">https://github.com/avast/sage.</a>&nbsp;If you use Claude Code, Cursor, or OpenClaw, install Sage and put it in the path of real work. The fastest way to improve a safety layer is to expose it to real commands, real repos, and real mistakes. That's what we're doing here — shipping early, in the open.&nbsp;

Closing the growing security gap between what Al agents can do and what keeps them in check

Introducing Sage: Safety for Agents 

AI agents aren’t just helpful in chats anymore. They’re actually taking action on your behalf. Autonomous AI can access data. They move from suggestion to execution without hesitation.&nbsp;This is what we call “mindless artificial intelligence.”&nbsp;When technology starts taking action on our behalf, trust has to be built into the system itself.&nbsp;That’s why Gen is partnering with Vercel to bring independent safety verification to the AI skills ecosystem at <a href="https://skills.sh/" target="_blank">skills.sh</a>, embedding trust directly into the skills layer.&nbsp;

<h2>Independent verification. Built in.&nbsp;</h2>Through this partnership, the Gen <a href="https://ai.gendigital.com/agent-trust-hub" target="_blank">Agent Trust Hub</a> will evaluate skills on skills.sh and assign clear, transparent classifications:&nbsp;🟢 Safe&nbsp; 🟡 Low Risk&nbsp; 🟠 High Risk&nbsp; 🔴 Critical Risk&nbsp;Behind those ratings is advanced risk modeling and threat intelligence from Gen Threat Labs, analyzing permissions, behaviors, vulnerabilities and potential malicious intent.&nbsp;The goal isn’t to slow innovation. It’s to help it scale responsibly. Developers should be able to build boldly. Users should be able to install confidently. And both deserve clarity.&nbsp;<h2>Security as infrastructure, not an afterthought&nbsp;</h2>By integrating verification directly into skills.sh, Gen and Vercel are making security part of the AI development lifecycle, not something bolted on after the fact.&nbsp;In the agentic world, skills are how things get done. Until now, developers and users had limited visibility into whether a skill was truly safe. Reputation and documentation can’t tell the whole story. As agents gain autonomy, guesswork isn’t good enough.&nbsp;The trust has to be visible.

<h2>Powering Digital Freedom in what comes next&nbsp;</h2>At Gen, we believe Digital Freedom means being able to embrace new technology without sacrificing safety or confidence. As AI evolves, our responsibility evolves with it.&nbsp;The future of AI will be powerful. And expansive. But, it must also be secure by design.&nbsp;This partnership is one more step toward building the trust foundation the agentic era demands, so innovation and confidence can grow together.&nbsp;

Bringing transparent risk ratings to the AI skills ecosystem to help developers build boldly and users move confidently

The trust layer for the agentic era 

As cyberattacks continue to evolve, so does Gen. However, the cybersecurity industry faces a pressing challenge: a growing technical skills gap. This gap is unbalancing the equation of demand for skilled cybersecurity professionals and the available supply of qualified individuals.   &nbsp;&nbsp;We’re committed to continuing to bridge that gap in this increasingly digitized world. &nbsp;&nbsp;Cyberskills versus cyberthreats&nbsp;With the sophistication of threats, both code-driven and human-engineered, the world demands a new generation of cybersecurity engineers equipped to understand emerging systems and defend against rapidly developing threats.  &nbsp;As cybercriminals devise increasingly complex and targeted attacks, the need for cybersecurity experts with specialized skills and expertise has never been more urgent. But, an Eurobarometer survey indicates that the <a href="https://europa.eu/eurobarometer/surveys/detail/3176">cyberskills shortage is only increasing</a>. While there needs to make staff highly cybersecurity-aware increases with it for companies across the EU.&nbsp;&nbsp;&nbsp;The diversity gap&nbsp;The shortage isn’t limited to skill sets. There is also a lack of diversity in the cybersecurity workforce. &nbsp;We believe great workers can come from anywhere. Yet, women and minorities are significantly underrepresented in the field. The nature of education and work has grown increasingly dispersed across geolocations, but education and training programs are often not reaching these populations effectively.  &nbsp;The consequences for organizations and individuals alike are far-reaching. This lack of diversity limits the pool of potential cybersecurity talent and hinders the industry's ability to address the skills gap comprehensively. &nbsp;&nbsp;How Gen is working to bridge the gaps&nbsp;Our company and our people recognize the gravity of the cybersecurity skills gap. We’re committed to addressing this issue head-on through various initiatives: &nbsp;<ol><li>Partnering with organizations like <a href="https://www.czechitas.cz/en">Czechitas</a> and <a href="https://nasscom.in/">Nasscom</a> to bridge the gender tech gap and promote diversity in the cybersecurity workforce. &nbsp;</li><li>Joining the <a href="https://commission.europa.eu/index_en">European Commission</a>’s Cybersecurity Skills Academy to discuss free training pledges and market needs.  &nbsp;</li><li>Pledging to close the gender gap in cybersecurity through an exclusive sponsorship with the <a href="https://women4cyber.eu/">Women4Cyber</a> Mentoring Program. This program is open to women of all experience levels and aims to advance skill development and career progression.  &nbsp;</li><li>Embracing <a href="https://www.gendigital.com/us/en/social-impact/diversity-equity-and-inclusion/">DEI initiatives</a> and fostering a company culture that attracts and retains top cybersecurity talent. We take pride in a diverse and inclusive workplace where everyone feels welcomed, valued and empowered to contribute to our collective cybersecurity efforts. &nbsp;</li><li>Offering a wide range of <a href="https://www.gendigital.com/us/en/life-gen/learn-gen/">educational programs and resources</a> to help our employees develop and enhance their cybersecurity skills &nbsp;</li><li>Supporting STEM education initiatives and implementing inclusive hiring practices.  &nbsp;</li></ol>The cybersecurity skills gap poses a significant challenge, but it is a challenge that we can continue to overcome through collaborative efforts. By working closely with organizations, pledging to close the gender gap, promoting inclusive hiring practices and fostering a supportive company culture we can create a future where everyone can succeed in the cybersecurity industry and collectively protect ourselves from the evolving threats of cyberattacks. &nbsp;&nbsp;If you’re interested in joining our global team to push back against emerging cybersecurity threats, find out more about <a href="https://gen.wd1.myworkdayjobs.com/careers">how you can join our team</a>. &nbsp;

Our call for action and inclusion to create a new workforce

How Gen is committed to bridging the global cybersecurity skills gap

As the world’s most elite athletes gather for this summer’s competitions, cybercriminals are seizing the opportunity to exploit the elevated attention. These events showcase athletic excellence, attracting fans worldwide, but on the downside – they also attract malicious actors.Alongside some of the fastest and strongest humans on Earth, cybercriminals have set their own new records.&nbsp;With Summer 2024 ripe for global sporting events, cybercriminals took advantage of the topic. In the first half of the year alone, Gen saw an increase of 942% in sport-related scams compared to the same period in 2023. In past sporting events, scam and phishing attacks increased by 280% during the previous Summer Games and by 238% during the last Winter Games.&nbsp;This year, we have already witnessed a surge in scams related to France.&nbsp;In the first six months of 2024, scams tied to the events surged by 942% compared to the same timeframe in 2023.&nbsp;Here’s a look at fraud related to past games.&nbsp;

<h2>Emerging Threat Landscape</h2>As competitions continue in France, organizations and individuals should be vigilant of these five threats:1. Scam and Phishing Attacks Cybercriminals exploit the popularity of these events by disseminating fake emails and messages that impersonate official sources. These communications often offer counterfeit tickets, merchandise, or urgent updates, aiming to deceive recipients into divulging personal information or clicking on malicious links.2. Fake Ticket and Resale Scams High demand for tickets creates a lucrative environment for criminals to sell counterfeit tickets through fraudulent websites or third-party resellers, leading to financial losses and identity theft. SEVERAL WEBSITES TO AVOID: paris24tickets[.]com, paris24tickets[.]net, liveticketfinder[.]com, tickets-paris24[.]com&nbsp;Below are two examples of fake websites.

3. Fake Streaming Sites&nbsp; With the surge in demand for live event streams, attackers establish fake streaming websites designed to infect devices with malware or steal personal information.4. Malicious Mobile Apps Mobile apps claiming to offer live updates, scores or exclusive content can sometimes be used to install harmful software on devices or to steal personal data.5. Wi-Fi Security Risks Public Wi-Fi networks around event venues and fan zones are prime targets for hackers seeking to intercept personal data.<h2>Ways to Protect Yourself</h2>Source Verification and Link Caution.&nbsp;Always authenticate the legitimacy of sources before engaging with them. Verify URLs and contact information to ensure they are genuine. One tip is to assess the reviews and terms of service of a website. Scam sites often lack credible reviews and have confusing or illogical terms. Exercise caution when encountering unfamiliar links in emails or online. Avoid clicking on any links unless you are certain of their authenticity.Secure Payment Methods.&nbsp;Use secure and verified payment methods. Legitimate partners will not request payments via unconventional methods such as gift cards or wire transfers.Turn to Official Channels.&nbsp;For reliable information, refer to the official websites of partners and authorized ticket sellers.Use an AI-powered Scam Detection App.&nbsp;Cyberthreats like phishing emails, counterfeit tickets, and fake websites pose significant risks to attendees and fans.&nbsp;<a href="https://us.norton.com/products/genie-scam-detector">Norton Genie</a>, an AI-powered scam detection tool, can help keep people safe by reviewing websites, texts, and emails, quickly identifying potential scams and providing peace of mind amid heightened security concerns. Its advanced detection capabilities help ensure users can confidently navigate digital interactions without falling victim to cyber fraud.The allure of major sporting events is not only limited to fans and athletes but also the cybercriminals looking to exploit the excitement. However, with informed vigilance and strategic measures, you can safely navigate the digital world and enjoy these games without falling victim to cyberthreats.Be proactive when it comes to your cybersecurity, to help ensure your digital safety, privacy and confidence during this year's events in France.

Emma Brownstein

Posts by Emma Brownstein

Gen Celebrates Hispanic Heritage Month

The Spread of AI-Generated Disinformation

Safeguarding Digital Freedom: How a Gen Discovery Helped to Protect Windows Users Everywhere

Empowering the Next Generation for a Safer Digital World

How Gen is committed to bridging the global cybersecurity skills gap

Stay Alert: Beware of Scams Targeting Major Sports Fans