{"id":65439,"date":"2026-06-24T11:46:24","date_gmt":"2026-06-24T11:46:24","guid":{"rendered":"https:\/\/zero.redgem.net\/?p=65439"},"modified":"2026-06-24T11:46:24","modified_gmt":"2026-06-24T11:46:24","slug":"watch-out-for-renewal-scams-pretending-to-be-malwarebytes","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=65439","title":{"rendered":"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF"},"content":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;2026-06-24T15:36:50&#8243;,&#8221;description&#8221;:&#8221;Fake subscription renewal notices are doing the rounds again. Some of these scams impersonate Malwarebytes, and we&#8217;ve also seen them reach our customers.\\n\\nYou&#8217;re more likely to trust the message if you&#8217;re already a customer of the company mentioned in the email. That&#8217;s what the scammers are counting on.\\n\\nSo we want to make people aware that these scams are becoming increasingly common, and explain how to spot them.\\n\\nSoftware renewal scams (including fake Malwarebytes \u201crenewal\u201d emails and calendar invites) are a specific, very active form of phishing and tech support fraud that contribute to millions of dollars in losses every year.\\n\\n## What to look out for\\n\\nThe template is easy enough to recognize once you know how to spot the signs:\\n\\n  * The sender&#8217;s email address doesn&#8217;t belong to the company the sender claims to represent. Often the messages come from compromised accounts or from lookalike domains designed to appear legitimate. Always check the sender&#8217;s email address carefully.\\n  * The emails will often include lots of official-looking (but made-up) details and reference numbers, along with a charge large enough to provoke concern. The amount is typically several hundred dollars, but it can be much higher.\\n  * The message usually ends with a phone number to call or a link where you can supposedly dispute the charge. The wording and amounts vary from scam to scam. The phone numbers change too, often using local-looking numbers or hosted voice services to appear more trustworthy. Below is one example we saw that uses a callback lure, encouraging the target to call a phone number and engage with a tech support scam:\\n\\n\\n\\n* * *\\n\\n\\u003e **Subject:** Account Maintenance Update\\n\\u003e \\n\\u003e **From:** \\u003credacted sender name\\u003e \\u003credacted-email@example.com\\u003e\\n\\u003e \\n\\u003e * * *\\n\\u003e \\n\\u003e Your order for Malwarebytes Ultimate Protection has been confirmed. The total amount of **$276.50 USD** has been successfully charged.\\n\\u003e \\n\\u003e **Invoice Details:**\\n\\u003e \\n\\u003e Invoice #: INV\u2011ZIDNQCWSMO  \\n\\u003e Product: Ultimate Security Pack  \\n\\u003e License Term: 3 Years  \\n\\u003e Seats: 3 Devices  \\n\\u003e Subtotal: $276.50 USD  \\n\\u003e Tax: $0.00 USD  \\n\\u003e **Grand Total: $276.50 USD**  \\n\\u003e  Activation Code: 8fd14ea8\u20114014\u20114430\u2011ba19\u2011313554098112\\n\\u003e \\n\\u003e Your license is now active and will renew automatically.\\n\\u003e \\n\\u003e For billing inquiries, reach us at **+1 (810) 210\u20115434**.\\n\\n* * *\\n\\n  * Other fake renewal notices may pretend to come from PayPal or other payment providers and direct you to a website where you&#8217;re asked to log in. These are phishing emails trying to steal your banking credentials.\\n\\n\\n\\n## How to stay safe\\n\\nIf you receive a subscription renewal communication claiming to be from us, our Help Center article explains how our legitimate renewal notices work and how to verify they&#8217;re genuine.\\n\\nIn general:\\n\\n  * Do not click links or call phone numbers in unsolicited emails.\\n  * When in doubt, check the origin of the email by going directly to the company\u2019s official website and ask about it through official channels. Don&#8217;t follow sponsored search results to get there, as these can be scams.\\n  * Do not give out personal details, pins, passwords, payment information, or verification codes during an unsolicited call. Legitimate companies will not ask for passwords or verification codes over the phone.\\n  * Never allow a stranger to take over your computer remotely. It allows scammers to quickly search your computer for valuable information.\\n\\n\\n\\n**Pro tip:** Malwarebytes Scam Guard can help you determine whether an email is a scam and advise you on the next steps.\\n\\n* * *\\n\\n### **Something feel off? Check it before you click.  ** \\n\\n**Malwarebytes Scam Guard**  helps you analyze suspicious links, texts, and screenshots instantly.  \\n\\nAvailable with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.  \\n\\nTry it free \u2192&#8221;,&#8221;published&#8221;:&#8221;2026-06-24T14:18:13&#8243;,&#8221;modified&#8221;:&#8221;2026-06-24T14:18:13&#8243;,&#8221;type&#8221;:&#8221;malwarebytes&#8221;,&#8221;title&#8221;:&#8221;Watch out for renewal scams pretending to be Malwarebytes&#8221;,&#8221;source&#8221;:&#8221;&#8221;,&#8221;references&#8221;:&#8221;&#8221;,&#8221;id&#8221;:&#8221;MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF&#8221;,&#8221;bulletinFamily&#8221;:&#8221;blog&#8221;,&#8221;cwe&#8221;:null,&#8221;cvelist&#8221;:[],&#8221;sourceData&#8221;:&#8221;&#8221;,&#8221;sourceHref&#8221;:&#8221;&#8221;,&#8221;cvss&#8221;:{&#8220;score&#8221;:0,&#8221;severity&#8221;:&#8221;NONE&#8221;,&#8221;vector&#8221;:&#8221;NONE&#8221;,&#8221;version&#8221;:&#8221;NONE&#8221;},&#8221;cvss2&#8243;:{},&#8221;cvss3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;,&#8221;cvssV3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;}},&#8221;href&#8221;:&#8221;https:\/\/www.malwarebytes.com\/blog\/scams\/2026\/06\/watch-out-for-renewal-scams-pretending-to-be-malwarebytes&#8221;,&#8221;category_name&#8221;:&#8221;News&#8221;,&#8221;post_link&#8221;:&#8221;&#8221;,&#8221;product&#8221;:&#8221;&#8221;,&#8221;version&#8221;:&#8221;&#8221;,&#8221;vendor&#8221;:&#8221;&#8221;,&#8221;ai_description&#8221;:&#8221;&#8221;,&#8221;ai_severity&#8221;:&#8221;&#8221;,&#8221;ai_vendor&#8221;:&#8221;&#8221;,&#8221;ai_product&#8221;:&#8221;&#8221;,&#8221;ai_version&#8221;:&#8221;&#8221;,&#8221;ai_score&#8221;:0}<\/p>\n","protected":false},"excerpt":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;2026-06-24T15:36:50&#8243;,&#8221;description&#8221;:&#8221;Fake subscription renewal notices are doing the rounds again. Some of these scams impersonate Malwarebytes, and we&#8217;ve also seen them reach our customers.\\n\\nYou&#8217;re more likely&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-65439","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=65439\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{&#8220;lastseen&#8221;:&#8221;2026-06-24T15:36:50&#8243;,&#8221;description&#8221;:&#8221;Fake subscription renewal notices are doing the rounds again. Some of these scams impersonate Malwarebytes, and we&#8217;ve also seen them reach our customers.nnYou&#8217;re more likely...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=65439\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-24T11:46:24+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=65439#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=65439\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF\",\"datePublished\":\"2026-06-24T11:46:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=65439\"},\"wordCount\":821,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"exploit\",\"malwarebytes\",\"news\",\"NONE\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_news\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=65439#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=65439\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=65439\",\"name\":\"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-06-24T11:46:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=65439#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=65439\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=65439#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=65439","og_locale":"en_US","og_type":"article","og_title":"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF - zero redgem","og_description":"{&#8220;lastseen&#8221;:&#8221;2026-06-24T15:36:50&#8243;,&#8221;description&#8221;:&#8221;Fake subscription renewal notices are doing the rounds again. Some of these scams impersonate Malwarebytes, and we&#8217;ve also seen them reach our customers.nnYou&#8217;re more likely...","og_url":"https:\/\/zero.redgem.net\/?p=65439","og_site_name":"zero redgem","article_published_time":"2026-06-24T11:46:24+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=65439#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=65439"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF","datePublished":"2026-06-24T11:46:24+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=65439"},"wordCount":821,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","exploit","malwarebytes","news","NONE","Security","tapic","Vulnerability"],"articleSection":["category_news"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=65439#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=65439","url":"https:\/\/zero.redgem.net\/?p=65439","name":"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-06-24T11:46:24+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=65439#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=65439"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=65439#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Watch out for renewal scams pretending to be Malwarebytes_MALWAREBYTES:B676169C29D86A2482A9B5FF7B0079BF"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/65439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=65439"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/65439\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=65439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=65439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=65439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}