A fake purchase order attachment turned out to be a phishing page designed to harvest your login details. This article has been indexed from Malwarebytes Read the original article: Purchase order attachment isn’t a PDF. It’s phishing for your password
Tag: Malwarebytes
A week in security (February 23 – March 1)
A list of topics we covered in the week of February 23 to March 1 of 2026 This article has been indexed from Malwarebytes Read the original article: A week in security (February 23 – March 1)
Public Google API keys can be used to expose Gemini AI data
Researchers found that Google API keys long treated as harmless can now unlock access to Gemini. This article has been indexed from Malwarebytes Read the original article: Public Google API keys can be used to expose Gemini AI data
Inside a fake Google security check that becomes a browser RAT
Disguised as a security check, this fake Google alert uses browser permissions to harvest contacts, location data, and more. This article has been indexed from Malwarebytes Read the original article: Inside a fake Google security check that becomes a browser…
Fake Zoom and Google Meet scams install Teramind: A technical deep dive
Attackers don’t always need custom malware. Sometimes they just need a trusted brand and a legitimate tool. This article has been indexed from Malwarebytes Read the original article: Fake Zoom and Google Meet scams install Teramind: A technical deep dive
How to understand and avoid Advanced Persistent Threats
APT stands for Advanced Persistent Threat. But what does that actually mean, and how does it translate into the kind of threat you’re facing? This article has been indexed from Malwarebytes Read the original article: How to understand and avoid…
The Conduent breach; from 10 million to 25 million (and counting)
A third-party breach at Conduent now affects 25 million Americans—many never knew their data flowed through its systems. This article has been indexed from Malwarebytes Read the original article: The Conduent breach; from 10 million to 25 million (and counting)
Instagram flagged explicit messages to minors in 2018. Image-blurring arrived six years later
Unsealed court records reveal Instagram executives discussed explicit messages to teens years before a blur feature was introduced. This article has been indexed from Malwarebytes Read the original article: Instagram flagged explicit messages to minors in 2018. Image-blurring arrived six…
Developer creates app to detect nearby smart glasses
A developer created an Android app that looks for nearby smart glasses. It’s not perfect, but it can help people in certian circumstances. This article has been indexed from Malwarebytes Read the original article: Developer creates app to detect nearby…
Reddit, porn sites fined by UK regulators over children’s safety and privacy
Ofcom and the Information Commissioner’s Office respectively fined a US porn company and Reddit for failing to protect children online. This article has been indexed from Malwarebytes Read the original article: Reddit, porn sites fined by UK regulators over children’s…
Roblox gives predators “powerful tools” to target children, says LA County
Los Angeles County sued the online gaming platform Roblox for its alleged failure to protect children from danger. This article has been indexed from Malwarebytes Read the original article: Roblox gives predators “powerful tools” to target children, says LA County
Fake Zoom meeting “update” silently installs surveillance software
A fake Zoom meeting page looks real, triggers a bogus “update,” and silently installs surveillance software. This article has been indexed from Malwarebytes Read the original article: Fake Zoom meeting “update” silently installs surveillance software
Refund scam impersonates Avast to harvest credit card details
A convincing fake Avast site displays a €499.99 charge and promises a refund. Instead, it harvests your name, address, and full credit card details. This article has been indexed from Malwarebytes Read the original article: Refund scam impersonates Avast to…
OpenClaw: What is it and can you use it safely?
OpenClaw is a hot topic at the moment. But what is it and how can you use the 24/7 AI assistant in a safe way? This article has been indexed from Malwarebytes Read the original article: OpenClaw: What is it…
Password managers keep your passwords safe, unless…
Researchers investigated the zero-knowledge claims of password managers—and found some possible attack scenarios. This article has been indexed from Malwarebytes Read the original article: Password managers keep your passwords safe, unless…
Fake Huorong security site infects users with ValleyRAT
One extra letter in the domain is all it takes to hand over remote control of your system. This article has been indexed from Malwarebytes Read the original article: Fake Huorong security site infects users with ValleyRAT
A week in security (February 16 – February 22)
A list of topics we covered in the week of February 16 to February 22 of 2026 This article has been indexed from Malwarebytes Read the original article: A week in security (February 16 – February 22)
What can’t you say on TikTok?
This week on the Lock and Code podcast, we speak with Zach Hinkle and MinJi Pae about TikTok’s new American ownership—and it’s new rules. This article has been indexed from Malwarebytes Read the original article: What can’t you say on…
Age verification vendor Persona left frontend exposed, researchers say
Behind a basic age check, researchers say Persona’s system runs extensive identity, watchlist, and adverse-media screening. This article has been indexed from Malwarebytes Read the original article: Age verification vendor Persona left frontend exposed, researchers say
Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets
Attackers are weaponizing Facebook ads to distribute password-stealing malware masked as a Windows download. This article has been indexed from Malwarebytes Read the original article: Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets