Beware of “Parcel Expert” job offers: They’re parcel mule scams
A parcel mule scam, also called a reshipping scam, is a fake job offer designed to recruit people into handling stolen goods. It usually starts…
Category: MalwareBytes
Update Chrome to patch critical browser security flaws
Google released a security update for Chrome that fixes 18 vulnerabilities, including four rated Critical. There is no indication that any of these newly patched…
Watch out for renewal scams pretending to be Malwarebytes
Fake subscription renewal notices are doing the rounds again. Some of these scams impersonate Malwarebytes, and we’ve also seen them reach our customers. You’re more…
PixelSmash flaw turns video files into attack tools
A newly discovered vulnerability in FFmpeg’s MagicYUV decoder can turn a tiny, malformed video into a foothold for attackers. Researchers have disclosed PixelSmash, a critical…
“Total access to all your devices.” Sextortion scammers strike again
At the moment, we’re seeing all kinds of sextortion emails. The scam is cheap to run, easy to automate, and apparently profitable enough that cybercriminals…
Hackers steal passport and driver’s license data of 3 million Texans
You can change a password and cancel a card. But replacing a passport or driver’s license number every time someone leaves yours unsecured in a…
Inside the dark web: Stolen identities for 95¢, malware, and scams-for-hire
Most people have heard of the dark web, but few understand what it actually looks like or what goes on there. To separate fact from…
Meta pauses controversial employee-tracking program after security review
Meta has paused a controversial employee‑tracking program after an internal security review found that highly granular keystroke and screen‑capture data from staff laptops was far…
GTA 6 early access is nothing but a scam
A new wave of scam websites is offering something millions of people want: a way to play Grand Theft Auto VI before it comes out.…
Thousands of D-Link routers under control of AryStinger botnet
Researchers have found that the recently discovered AryStinger botnet has quietly hijacked thousands of end‑of‑life D‑Link routers and some network-attached storage (NAS) devices, turning them…
Document delivery scams: What are they and what’s their goal?
One of Malwarebytes’ managers recently received a call from scammers pretending to be a document delivery service. The voicemail sounded official: “I am calling on…
A week in security (June 15 – June 21)
Last week on Malwarebytes Labs: Nearly 15,000 infected websites cleaned in SocGholish crackdown Apple patches Beats Studio Buds flaw that could turn earbuds into a…