Category: MalwareBytes

An illustrated padlock is mounted into a microphone stand with sound waves emitting from the device.
26
Jan
2026

One privacy change I made for 2026 (Lock and Code S07E02)

This week on the Lock and Code podcast… When you hear the words “data privacy,” what do you first imagine?…

week in security
26
Jan
2026

A week in security (January 19 – January 25)

Last week on Malwarebytes Labs: On the ThreatDown blog: Stay safe! We don’t just report on threats—we remove them Cybersecurity…

Zendesk logo
23
Jan
2026

Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?

Short answer: we have no idea. People are actively complaining that their mailboxes and queues are being flooded by emails…

LastPass
22
Jan
2026

Fake LastPass maintenance emails target users

The LastPass Threat Intelligence, Mitigation, and Escalation (TIME) team has published a warning about an active phishing campaign in which…

Under Armour
22
Jan
2026

Under Armour ransomware breach: data of 72 million customers appears on the dark web

When reports first emerged in November 2025 that sportswear giant Under Armour had been hit by the Everest ransomware group,…

Two rats
21
Jan
2026

Can you use too many LOLBins to drop some RATs?

Recently, our team came across an infection attempt that stood out—not for its sophistication, but for how determined the attacker…

Calendar invite Gemini
21
Jan
2026

Malicious Google Calendar invites could expose private data

Researchers found a way to weaponize calendar invites. They uncovered a vulnerability that allowed them to bypass Google Calendar’s privacy…

Laptop showing a warning
20
Jan
2026

Fake extension crashes browsers to trick users into infecting themselves

Researchers have found another method used in the spirit of ClickFix: CrashFix. ClickFix campaigns use convincing lures—historically “Human Verification” screens—to…

Google
20
Jan
2026

Google will pay $8.25m to settle child data-tracking allegations

Google has settled yet another class-action lawsuit accusing it of collecting children’s data and using it to target them with…

sleeper browser extensions for three popular browsers
19
Jan
2026

Firefox joins Chrome and Edge as sleeper extensions spy on users

A group of cybercriminals called DarkSpectre is believed to be behind three campaigns spread by malicious browser extensions: ShadyPanda, GhostPoster,…

week in security
19
Jan
2026

A week in security (January 12 – January 18)

Last week on Malwarebytes Labs: Stay safe! We don’t just report on scams—we help detect them Cybersecurity risks should never…

earbuds
16
Jan
2026

WhisperPair exposes Bluetooth earbuds and headphones to tracking and eavesdropping

WhisperPair is a set of attacks that lets an attacker hijack many popular Bluetooth audio accessories that use Google Fast…