How private is your VPN?
When you’re shopping around for a Virtual Private Network (VPN) you’ll find yourself in a sea of promises like “military-grade encryption!” and “total anonymity!” You…
Category: MalwareBytes
DroidLock malware locks you out of your Android device and demands ransom
Researchers have analyzed a new threat campaign actively targeting Android users. The malware, named DroidLock, takes over a device and then holds it for ransom.…
Malwarebytes for Mac now has smarter, deeper scans
Say hello to the upgraded Malwarebytes for Mac—now with more robust protection, more control, and the same trusted defense you count on every day. We’ve…
Another Chrome zero-day under attack: update now
Google issued an extra patch for a security vulnerability in Chrome that is being actively exploited, and it’s urging users to update. The patch fixes…
December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices
These updates from Microsoft fix serious security issues, including three that attackers are already exploiting to take control of Windows systems. In total, the security…
GhostFrame phishing kit fuels widespread attacks against millions
GhostFrame is a new phishing-as-a-service (PhaaS) kit, tracked since September 2025, that has already powered more than a million phishing attacks. Threat analysts spotted a…
Prompt injection is a problem that may never be fixed, warns NCSC
Prompt injection is shaping up to be one of the most stubborn problems in AI security, and the UK’s National Cyber Security Centre (NCSC) has…
EU fines X $140m, tied to verification rules that make impostor scams easier
The European Commission slapped social networking company X with a €120 million ($140 million) fine last week for what it says was a lack of…
Deepfakes, AI resumes, and the growing threat of fake applicants
Recruiters expect the odd exaggerated resume, but many companies, including us here at Malwarebytes, are now dealing with something far more serious: job applicants who…
How phishers hide banking scams behind free Cloudflare Pages
During a recent investigation, we uncovered a phishing operation that combines free hosting on developer platforms with compromised legitimate websites to build convincing banking and…
Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI
The FBI has warned about a new type of scam where your Facebook pictures are harvested to act as “proof-of-life” pictures in a virtual kidnapping.…
Leaks show Intellexa burning zero-days to keep Predator spyware running
Intellexa is a well-known commercial spyware vendor, servicing governments and large corporations. Its main product is the Predator spyware. An investigation by several independent parties…