Researchers found 16 malicious browser extensions that can quietly hijack active ChatGPT sessions and siphon user data. This article has been indexed from Malwarebytes Read the original article: Malicious Chrome extensions can spy on your ChatGPT chats
Category: Malwarebytes
WhatsApp rolls out new protections against advanced exploits and spyware
WhatsApp is strengthening how it handles photos and videos, and introducing Strict Account Settings to limit risky messages from unknown senders. This article has been indexed from Malwarebytes Read the original article: WhatsApp rolls out new protections against advanced exploits…
Watch out for AT&T rewards phishing text that wants your personal details
Recently, we uncovered a realistic, multi-layered data theft phishing campaign targeting AT&T customers. This article has been indexed from Malwarebytes Read the original article: Watch out for AT&T rewards phishing text that wants your personal details
A WhatsApp bug lets malicious media files spread through group chats
Google’s Project Zero team found that WhatsApp can download a malicious media file without you doing anything at all. This article has been indexed from Malwarebytes Read the original article: A WhatsApp bug lets malicious media files spread through group…
TikTok narrowly avoids a US ban by spinning up a new American joint venture
TikTok may have avoided a ban, but it didn’t become a different company overnight. Like any other social network, assume your data matters, and share accordingly. This article has been indexed from Malwarebytes Read the original article: TikTok narrowly avoids…
Get paid to scroll TikTok? The data trade behind Freecash ads
Ads promised up to $35 an hour to watch videos. Instead, users were funneled into mobile games designed to drive spending and collect data. This article has been indexed from Malwarebytes Read the original article: Get paid to scroll TikTok?…
One privacy change I made for 2026 (Lock and Code S07E02)
This week on the Lock and Code podcast, host David Ruiz explains why he’s leaving behind Google Search… and what he’s replacing it with. This article has been indexed from Malwarebytes Read the original article: One privacy change I made…
A week in security (January 19 – January 25)
A list of topics we covered in the week of January 19 to January 25 of 2026 This article has been indexed from Malwarebytes Read the original article: A week in security (January 19 – January 25)
Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
Spammers are abusing Zendesk to flood inboxes with emails from trusted brands. There’s no phishing or malware—just noise. This article has been indexed from Malwarebytes Read the original article: Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
Fake LastPass maintenance emails target users
LastPass is warning users about phishing emails that pressure users to back up their vaults within 24 hours. This article has been indexed from Malwarebytes Read the original article: Fake LastPass maintenance emails target users
Under Armour ransomware breach: data of 72 million customers appears on the dark web
Customer data allegedly stolen during a ransomware attack on sportswear giant Under Armour is now circulating on the dark web. This article has been indexed from Malwarebytes Read the original article: Under Armour ransomware breach: data of 72 million customers…
Can you use too many LOLBins to drop some RATs?
An attempt to drop two RATs on a system used an uncanny assortment of legitimate Windows tools. This article has been indexed from Malwarebytes Read the original article: Can you use too many LOLBins to drop some RATs?
Malicious Google Calendar invites could expose private data
Researchers showed how prompt injection hidden in a calendar invite can bypass privacy controls and turn an AI assistant into a data-leaking accomplice. This article has been indexed from Malwarebytes Read the original article: Malicious Google Calendar invites could expose…
Fake extension crashes browsers to trick users into infecting themselves
A fake ad blocker crashes your browser, then uses ClickFix tricks to make you run the malware yourself. This article has been indexed from Malwarebytes Read the original article: Fake extension crashes browsers to trick users into infecting themselves
Google will pay $8.25m to settle child data-tracking allegations
Google-owned AdMob allegedly collected kids’ data for ads without parental consent—including IP addresses, usage data, and exact locations. This article has been indexed from Malwarebytes Read the original article: Google will pay $8.25m to settle child data-tracking allegations
Firefox joins Chrome and Edge as sleeper extensions spy on users
Researchers found more sleeper browser extensions that spy on users and install backdoors, this time targeting Firefox users as well. This article has been indexed from Malwarebytes Read the original article: Firefox joins Chrome and Edge as sleeper extensions spy…
A week in security (January 12 – January 18)
Last week on Malwarebytes Labs: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (January 12 – January 18)
WhisperPair exposes Bluetooth earbuds and headphones to tracking and eavesdropping
Researchers demonstrated WhisperPair, a set of attacks that can take control of many widely used Bluetooth earbuds and headphones without user interaction. This article has been indexed from Malwarebytes Read the original article: WhisperPair exposes Bluetooth earbuds and headphones to…
Dutch police sell fake tickets to show how easily scams work
A fake ticket website that ended with a digital finger-wag showed just how many people still fall for concert and sports ticket scams. This article has been indexed from Malwarebytes Read the original article: Dutch police sell fake tickets to…
“Reprompt” attack lets attackers steal data from Microsoft Copilot
Researchers uncovered a way to steal data from Microsoft Copilot users with a single malicious link. This article has been indexed from Malwarebytes Read the original article: “Reprompt” attack lets attackers steal data from Microsoft Copilot