Don’t trust that “FBI agent” in your DMs
The Federal Bureau of Investigation’s (FBI) Internet Crime Complaint Center (IC3) is warning that scammers are impersonating the bureau on social media and on messaging…
Category: MalwareBytes
What happens if you visit a WordPress site hacked through wp2shell?
WordPress has patched a serious core vulnerability chain known as wp2shell, and site owners are understandably focused on updating their own sites. But there’s another…
New ClickLock Stealer locks your Mac until you hand over your password
ClickLock Stealer is a new, modular macOS infostealer delivered via ClickFix-style phishing pages that can lock a victim’s Mac, steal their macOS password, browser and…
AI nudify apps spark legal scrutiny of Apple and Google’s profits
You expect all kinds of apps on Apple’s App Store and Google’s Play Store, from weather monitors to home automation apps and games. What you…
Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding
We have detected several campaigns using fake downloads of games, mods, cracks, and software to spread RenPy Loader. Once installed, the loader starts a complex,…
The Odyssey piracy scams appear within hours of the movie’s release
Christopher Nolan’s The Odyssey is one of the biggest movie releases of the year and scammers wasted no time taking advantage of it. Within hours…
Healthcare giant Abbott probes two cyber incidents amid extortion claims
Abbott Laboratories, one of the world’s largest healthcare and medical device companies, is investigating two apparently unrelated cyber incidents after confirming unauthorized access to internal…
A week in security (July 13 – July 19)
Last week on Malwarebytes Labs: Stay safe! Scammers know more about you than you think. Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and…
How to use GitHub safely
GitHub is rapidly becoming the go-to platform for sharing software. Originally built for developers to collaborate on code, it now hosts millions of projects ranging…
Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS (Amazon Web Services) IoT (Internet of Things) policy flaw that could turn one compromised…
Samsung backs down on threat to delete health data
If you pay for something, you expect it to work as intended. The vendor shouldn’t start turning features off just because you won’t accept its…
The backlash against Flock cameras is spreading
Flock-style ALPR systems carry serious privacy and civil-liberties risks, and the backlash is now starting to show up in agency decisions too. For those not…