A week in security (June 22 – June 28)
Last week on Malwarebytes Labs: Stay safe! Browse like no one’s watching. Malwarebytes Privacy VPN encrypts your connection and never logs what you do, so the next…
Category: MalwareBytes
Malware steals Chrome session cookies to take over your accounts
An email attachment leads to the installation of a malicious Chrome extension. Researchers say it is part of a Windows backdoor delivered via a phishing…
Elite network says it was hacked after members’ personal data was left exposed
Some organizations exist to be exclusive. They’re invite-only, and discreet, the kind of place where the membership directory is the product. Dialog, the exclusive network…
Fake domain renewal emails trick website owners into paying scammers
You receive an email warning that your website’s domain name is about to expire. Renew now, it says, or your website and email could stop…
Beware of “Parcel Expert” job offers: They’re parcel mule scams
A parcel mule scam, also called a reshipping scam, is a fake job offer designed to recruit people into handling stolen goods. It usually starts…
Update Chrome to patch critical browser security flaws
Google released a security update for Chrome that fixes 18 vulnerabilities, including four rated Critical. There is no indication that any of these newly patched…
Watch out for renewal scams pretending to be Malwarebytes
Fake subscription renewal notices are doing the rounds again. Some of these scams impersonate Malwarebytes, and we’ve also seen them reach our customers. You’re more…
PixelSmash flaw turns video files into attack tools
A newly discovered vulnerability in FFmpeg’s MagicYUV decoder can turn a tiny, malformed video into a foothold for attackers. Researchers have disclosed PixelSmash, a critical…
“Total access to all your devices.” Sextortion scammers strike again
At the moment, we’re seeing all kinds of sextortion emails. The scam is cheap to run, easy to automate, and apparently profitable enough that cybercriminals…
Hackers steal passport and driver’s license data of 3 million Texans
You can change a password and cancel a card. But replacing a passport or driver’s license number every time someone leaves yours unsecured in a…
Inside the dark web: Stolen identities for 95¢, malware, and scams-for-hire
Most people have heard of the dark web, but few understand what it actually looks like or what goes on there. To separate fact from…
Meta pauses controversial employee-tracking program after security review
Meta has paused a controversial employee‑tracking program after an internal security review found that highly granular keystroke and screen‑capture data from staff laptops was far…