Researcher claims Claude Desktop installs “spyware” on macOS
Security researcher Alexander Hanff wrote an article titled Anthropic secretly installs spyware when you install Claude Desktop. Claims like that are bound to create two…
Category: MalwareBytes
Real Apple notifications are being used to drive tech support scams
Scammers have found a way to abuse legitimate Apple account notification emails to trick targets into calling fake tech support numbers. According to a report…
Fake Google Antigravity downloads are stealing accounts in minutes
Somebody went looking for Google’s new Antigravity coding tool this week, clicked download, ran the installer, and got exactly what they thought they were getting.…
Android 17 ends all-or-nothing access to your contacts
Some of the apps on your phone want your contacts. Most don’t need them all, but have been happily slurping up the lot for years.…
Mythos: An AI tool too powerful for public release
Anthropic’s most capable model to date, Claude Mythos Preview (aka Mythos), has been described as a “step change” in AI performance, especially on cybersecurity tasks.…
Big Tech can stop scams. They just don’t (Lock and Code S07E08)
This week on the Lock and Code podcast… A dreadful thing happens far too often whenever an older adult falls for a scam: They get…
A week in security (April 13 – April 19)
Last week on Malwarebytes Labs: This old-school scam is still working “Your shipment has arrived” email hides remote access software Browser Guard gets even better…
This old-school scam is still working
When we read about this new malware tactic, or that novel social engineering approach, it’s easy to forget that there are scammers out there making…
“Your shipment has arrived” email hides remote access software
An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers…
Credit Resources Vault: Why this credit email set off our scam alarms
If there is anything that annoys me more than a scammer, it’s companies that behave like one, while staying just on the right side of…
A fake Slack download is giving attackers a hidden desktop on your machine
A trojanized Slack download from a typosquatting website is giving attackers something most users wouldn’t even know to look for: a hidden desktop running on…
“iCloud storage is full” scam is back, and now it wants your payment details
A few months ago, we reported on a fake cloud storage alert that triggered a redirect chain to an app that has since been delisted…