Your tax forms sell for $20 on the dark web
Tax season is also peak season for identity theft. Criminals use stolen personal data to file fake tax returns and claim refunds before the real…
Category: MalwareBytes
A DarkSword hangs over unpatched iPhones
Researchers at Google have identified an iOS exploit chain, named DarkSword, that has been used since late last year by multiple actors to infect iPhones with…
Researchers found font-rendering trick to hide malicious commands
Researchers have published a proof-of-concept (PoC) that uses custom fonts to fool many popular Artificial Intelligence (AI) assistants, including ChatGPT, Claude, Copilot, Gemini, Leo, Grok,…
Apple patches WebKit bug that could let sites access your data
Apple has released a Background Security Improvement to patch a flaw that could allow malicious websites to bypass browser protections and access data from other…
Inside a network of 20,000+ fake shops
We mapped a sprawling fake shop operation of over 20,000 domains, dozens of shared IP addresses and identical storefronts with different names pasted on top.…
Google cracks down on Android apps abusing accessibility
Google just dropped a bombshell for app developers with the latest version of its Android mobile operating system. The company can now prevent apps from…
How searching for a VPN could mean handing over your work login details
This blog is about how trying to do the “right thing” can lead you straight into a trap. People searching for a VPN ended up…
Fake Pudgy World site steals your crypto passwords
A phishing site impersonating the newly-launched Pudgy World browser game is targeting crypto users with a technique that goes well beyond a convincing logo and…
90% of people don’t trust AI with their data
AI didn’t sneak into our lives. It burst through the door, took a seat at the table, and started finishing our sentences. Instead of a…
Delete doesn’t mean gone. Here’s how File Shredder fixes that
You have done it a thousand times. Right-click. Delete. Empty Trash. Done. Except it’s not done. That file, your tax return, your private photos, that…
Zombie ZIP method can fool antivirus during the first scan
A researcher published “Zombie ZIP,” a simple way to change the first part (header) of a ZIP file so it falsely claims its contents are uncompressed while…
Hacked sites deliver Vidar infostealer to Windows users
In recent years, ClickFix and fake CAPTCHA techniques have become a popular way for cybercriminals to distribute malware. Instead of exploiting a technical vulnerability, these…