Some weeks in security (December 16 – January 5)
January 3, 2025 – Invitations to try a beta lead to a fake game website where victims will get an information stealer instead of the…
Category: MalwareBytes
“Can you try a game I made?” Fake game sites lead to information stealers
The background and the IOCs for this blog were gathered by an Expert helper on our forums and Malwarebytes researchers. Our thanks go out to…
Data breaches in 2024: Could it get any worse?
It may sound weird when I say that I would like to remember 2024 as the year of the biggest breaches. That’s mainly because that…
Is nowhere safe from AI slop? (Lock and Code S05E27)
This week on the Lock and Code podcast… You can see it on X. You can see on Instagram. It’s flooding community pages on Facebook…
2024 in AI: It’s changed the world, but it’s not all good
A popular saying is: “To err is human, but to really foul things up you need a computer.” Even though the saying is older than…
Our Santa wishlist: Stronger identity security for kids
Sorry for the headline, but we have to get creative to get anyone to read an article on a Friday like this one, even if…
‘Fix It’ social-engineering scheme impersonates several brands
More and more, threat actors are leveraging the browser to deliver malware in ways that can evade detection from antivirus programs. Social engineering is a…
TP-Link faces US national security probe, potential ban on devices
The US government launched a national security investigation into the popular, Chinese-owned router maker TP-Link, with a potential eye on banning the company’s devices in…
Pallet liquidation scams and how to recognize them
Pallet liquidation scams target people looking to purchase pallets of supposedly discounted merchandise, often from major retailers like Amazon. Groups that engage in pallet liquidation…
AI-generated malvertising “white pages” are fooling detection engines
This is no secret, online criminals are leveraging artificial intelligence (AI) and large language models (LLMs) in their malicious schemes. While AI tends to be…
5 million payment card details stolen in painful reminder to monitor Christmas spending
Another day, another exposed S3 bucket. This time, 5 million US credit cards and personal details were leaked online. The Leakd.com security team discovered that…
Task scams surge by 400%, but what are they?
An unfamiliar type of scam has surged against everyday people, with a year-over-year increase of some 400%, putting job seekers at risk of losing their…