News
AI clickbait can turn your notifications into a scam feed
1+ day, 14+ hour ago (300+ words) Pushpaganda is the name researchers have given to an AI-assisted ad fraud, social engineering, and'scareware'operation targeting mobile users. The topics are classic clickbait. You might see a card about a new tax refund, a government payout, a bank deposit, or…...
From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere
1+ day, 21+ hour ago (820+ words) We've uncovered multiple campaigns distributing an infostealer we track as NWHStealer, using everything from fake VPN downloads to hardware utilities and gaming mods. What makes this campaign stand out isn't just the malware, but how widely and convincingly it's being…...
April Patch Tuesday fixes two zero-days, including one under active attack
1+ day, 21+ hour ago (383+ words) This month's patch Tuesday looks to remediate 167 security vulnerabilities including two zero-day vulnerabilities, one of which is known to be actively exploited in the wild. This makes April one of those months where "Patch Tuesday" looks more like "patch the…...
Omnistealer uses the blockchain to steal everything it can
2+ day, 19+ hour ago (434+ words) A new infostealer dubbed Omnistealer is turning the blockchain into a permanent malware hosting platform, which is bad news for both companies and everyday users. It's pretty common for malware to store its payload on a public platform, ideally one…...
A week in security (March 30 - April 5)
1+ week, 4+ day ago (145+ words) Last week on Malwarebytes Labs: We don't just report on data privacy'we help you remove your personal information Cybersecurity risks should never spread beyond a headline. With'Malwarebytes Personal Data Remover, you can scan to find out which sites are exposing…...
Malwarebytes Completes Inaugural Third-Party Security Audit of Azire VPN Infrastructure, Reinforcing Commitment to Radical Transparency
2+ week, 19+ hour ago (163+ words) X41 D-Sec audited VPN software and hardware" In an industry where trust is often requested but rarely verified, Malwarebytes made the strategic decision to open its entire source code, server configurations, and internal processes to external scrutiny." Audit Scope and Methodology…...
Apple expands "Dark Sword" patches to i OS 18. 7. 7
2+ week, 17+ hour ago (485+ words) Apple widened its latest i OS 18 security update to cover far more i Phones and i Pads, specifically to stop real'world Dark Sword attacks that can compromise a device from a single website visit. After researchers published their findings about…...
Malwarebytes Privacy VPN receives full third-party audit
2+ week, 19+ hour ago (538+ words) The audit of Malwarebytes Privacy VPN's software found:" The audit determinedissueseverity'from Critical to Low'by assigning technical scores that aligned with Common Vulnerability Scoring Standard(CVSS). This industry-wide system is used by security researchers around the world to measure the severity…...
Wikipedia's AI agent row likely just the beginning of the bot-ocalypse
2+ week, 1+ day ago (865+ words) The Internet is filled with people who insist on being right. In the past, at least they could be reasonably sure that they were arguing with other humans. Those days are gone, apparently. Wikipedia just had to ban an AI…...
Whats App on Windows users targeted in new campaign, warns Microsoft
2+ week, 1+ day ago (426+ words) Microsoft researchers found a campaign that abuses Whats App attachments to sneak a script onto Windows machines which will lead to the attacker gaining remote control. Whats App offers a desktop application for Windows and mac OS, which users can…...