Fake virus pop-ups are a growing nuisance for Windows users, and a new strain called CypherLoc has already hit more than 2.8 million people this year, according to security firm Barracuda. These 'scareware' alerts mimic official warnings from Microsoft or security vendors, using flashing lights and urgent language to trick users into calling fake tech support, downloading malicious scanners, or handing over payment details. The goal is always the same: gain access to your computer or steal money.
Businesses are especially vulnerable because a single employee falling for these tricks can expose an entire network. The good news is that the pop-ups are relatively easy to stop. If a full-screen alert appears, do not click anything. Instead, use the browser's built-in task manager (Shift+Esc in Chrome, Edge, and Firefox) to end the offending tab, or force-quit the browser entirely via the Windows Task Manager. After restarting, avoid reopening the previous session, as that will reload the scam page.
To prevent future pop-ups, review the list of sites allowed to send notifications and remove any unknown entries. Also check browser extensions and uninstall anything suspicious, and delete recent cookies and site data. The Engadget guide recommends these steps as a practical defense against scareware, and they apply equally to personal and corporate devices. Regular scans with Microsoft Defender can also catch silent malware that may have slipped through.