Fake CCleaner installs GhostDesk Chrome spyware
A fake version of the popular PC cleaning tool CCleaner is being used to infect Windows users with a malicious Chrome extension called GhostDesk, which…
Category: MalwareBytes
Valve warns Steam hardware buyers: Expect fake delivery scams
Most of us are wise to phishing emails that don’t contain much personal information. Generic “your account is suspended” messages usually get binned on sight.…
Watch out for fake TikTok Shops trying to steal your money
TikTok Shop is a real, functioning e-commerce feature built into the TikTok app, allowing users to buy goods without ever leaving TikTok. As it’s grown…
Edge is dropping older extensions, affecting popular privacy tools
Microsoft is beginning the retirement of Manifest V2 (MV2) extensions in Edge this month, with consumer completion targeted for the end of 2026 and managed-enterprise…
New turnkey kit makes it easy for anyone to become a scammer
In 2026, online scams have unfortunately become part of the new normal. They can appear almost anywhere, from social media and messaging apps to search…
How to fake a data trail (and maybe lower prices) (Lock and Code S07E16)
It may sound entirely bizarre but the prices you once paid for hotels, educational classes, or staplers could have all been higher because you used…
A week in security (August 3 – August 9)
Last week on Malwarebytes Labs: AI chat bots are sliding into League of Legends friend requests Meta ordered to pay $942 million over harm to…
Meta ordered to pay $942 million over harm to children
A New Mexico court has ordered Meta to pay a total of $942 million after finding that Facebook and Instagram harmed young users and that…
AI chat bots are sliding into League of Legends friend requests
Lina K., a co-worker, recently shared a firsthand account of how bots are adding League of Legends players via the Riot client friends list immediately…
Anthropic’s Mythos AI used social engineering to target real people
Anthropic’s Mythos AI agent, tested by the UK AI Safety Institute (AISI), has reportedly attempted a real‑world social‑engineering style hack against GitHub maintainers by creating…
Amazon and Apple impersonated in “$149.99 unauthorized charge” scam
If you’ve spent any time browsing lately, you may have run into a full-screen popup warning you that your Apple ID or Amazon account was…
Apple WebKit vulnerabilities reveal your IP address, despite Private Relay
Three WebKit mechanisms have been discovered to bypass Apple’s iCloud Private Relay. In fact, the mechanisms can bypass any browser‑level proxy configuration, including Psylo’s proxy,…