A week in security (March 2 – March 8)


Last week on Malwarebytes Labs:

  • One click on this fake Google Meet update can give attackers control of your PC
  • Beware of fake OpenClaw installers, even if Bing points you to GitHub
  • Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets
  • Windows File Shredder: When deleting a file isn’t enough
  • Supreme Court to decide whether geofence warrants are constitutional
  • Does the UK really want to ban VPNs? And can it be done?
  • Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks
  • High-severity Qualcomm bug hits Android devices in targeted attacks
  • Pentagon ditches Anthropic AI over “security risk” and OpenAI takes over
  • Chrome flaw let extensions hijack Gemini’s camera, mic, and file access
  • Samsung TVs stop spying on viewers in Texas. Here’s how to disable ACR anywhere
  • A fake FileZilla site hosts a malicious download
  • Purchase order attachment isn’t a PDF. It’s phishing for your password

Stay safe!


We don’t just report on threats—we remove them

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.



Source link