Scammers are once again using AI to take over Gmail accounts. This article has been indexed from Malwarebytes Read the original article: How AI was used in an advanced phishing campaign targeting Gmail users
Tag: Malwarebytes
Fake Etsy invoice scam tricks sellers into sharing credit card information
Etsy sellers are being targeted by scammers that use a legitimate Etsy domain to host their dodgy PDFs. This article has been indexed from Malwarebytes Read the original article: Fake Etsy invoice scam tricks sellers into sharing credit card information
Gambling firms are secretly sharing your data with Facebook
Gambling companies are sharing their users’ data with Meta for marketing and tracking purposes. This article has been indexed from Malwarebytes Read the original article: Gambling firms are secretly sharing your data with Facebook
Phishing evolves beyond email to become latest Android app threat
Android phishing apps are the latest, critical threat for Android users, putting their passwords in danger of new, sneaky tricks of theft. This article has been indexed from Malwarebytes Read the original article: Phishing evolves beyond email to become latest…
Apple fixes zero-day vulnerability used in “extremely sophisticated attack”
Apple has released an out-of-band security update for a vulnerability which it says may have been exploited in an “extremely sophisticated attack against specific targeted individuals.” This article has been indexed from Malwarebytes Read the original article: Apple fixes zero-day…
Apple ordered to grant access to users’ encrypted data
The UK has demanded Apple provides it with a worldwide backdoor into iCloud backups. Privacy organizations are furious. This article has been indexed from Malwarebytes Read the original article: Apple ordered to grant access to users’ encrypted data
A suicide reveals the lonely side of AI chatbots, with Courtney Brown (Lock and Code S06E03)
This week on the Lock and Code podcast, we speak with Courtney Brown about whether an AI chatbot can be blamed for a teenager’s suicide. This article has been indexed from Malwarebytes Read the original article: A suicide reveals the…
A week in security (February 3 – February 9)
Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (February 3 – February 9)
20 Million OpenAI accounts offered for sale
A cybercriminal calling themselves emirking is offering 20 million OpenAI accounts for sale on a Dark Web forum This article has been indexed from Malwarebytes Read the original article: 20 Million OpenAI accounts offered for sale
New scams could abuse brief USPS suspension of inbound packages from China, Hong Kong
News about USPS suspending shipments from China and Hong Kong may give scammers some ideas to defraud consumers This article has been indexed from Malwarebytes Read the original article: New scams could abuse brief USPS suspension of inbound packages from…
University site cloned to evade ad detection distributes fake Cisco installer
Malvertisers got inspired by the website for a German university to bypass ad security and distribute malware. This article has been indexed from Malwarebytes Read the original article: University site cloned to evade ad detection distributes fake Cisco installer
Small business owners, secure your web shop
Web shops are an attractive target. How can SMBs keep theirs safe? This article has been indexed from Malwarebytes Read the original article: Small business owners, secure your web shop
New AI “agents” could hold people for ransom in 2025
“Agentic” AI could arrive in 2025, and it may allow hackers to send individual, AI-powered agents to do their dirty work. This article has been indexed from Malwarebytes Read the original article: New AI “agents” could hold people for ransom…
Valley News Live exposed more than a million job seeker’s resumes
Valley News Live exposed more than a million job seeker’s resumes through an open AWS S3 bucket This article has been indexed from Malwarebytes Read the original article: Valley News Live exposed more than a million job seeker’s resumes
WhatsApp says Paragon is spying on specific users
WhatsApp has accused professional spyware company Paragon of spying on a select group of users. This article has been indexed from Malwarebytes Read the original article: WhatsApp says Paragon is spying on specific users
A week in security (January 27 – February 2)
A list of topics we covered in the week of January 27 to February 2 of 2025 This article has been indexed from Malwarebytes Read the original article: A week in security (January 27 – February 2)
ClickFix vs. traditional download in new DarkGate campaign
Social engineering methods are being put to the test to distribute malware. This article has been indexed from Malwarebytes Read the original article: ClickFix vs. traditional download in new DarkGate campaign
Cybercrime gets a few punches on the nose
Law enforcement took down several cybercrime forums that sold tools and data to other cybercriminals This article has been indexed from Malwarebytes Read the original article: Cybercrime gets a few punches on the nose
Microsoft advertisers phished via malicious Google ads
Just days after we uncovered a campaign targeting Google Ads accounts, a similar attack has surfaced, this time aimed at Microsoft… This article has been indexed from Malwarebytes Read the original article: Microsoft advertisers phished via malicious Google ads
The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?
The sudden rise of DeepSeek has raised questions of data origin, data destination, and the security of the new AI model. This article has been indexed from Malwarebytes Read the original article: The DeepSeek controversy: Authorities ask where does the…
The DeepSeek controversy: Authorities ask where the data comes from and where it goes
Authorities and users are asking questions about the new AI model DeepSeek. Where did the data come from and how safe is it? This article has been indexed from Malwarebytes Read the original article: The DeepSeek controversy: Authorities ask where…
These are the 10 worst PIN codes
Data analysis has shown which 4-digit pin codes offer the best chances for an attacker. Are you using one of them? This article has been indexed from Malwarebytes Read the original article: These are the 10 worst PIN codes
Apple users: Update your devices now to patch zero-day vulnerability
Apple has released a host of security updates for iOS, iPadOS, Mac, Apple Watch, and Apple TV. Update as soon as you can. This article has been indexed from Malwarebytes Read the original article: Apple users: Update your devices now…
UnitedHealth almost doubles victim numbers from massive Change Healthcare data breach
UnitedHealth now estimates that 190 million people were affected by the massive Change Healthcare data breach nearly a year ago. This article has been indexed from Malwarebytes Read the original article: UnitedHealth almost doubles victim numbers from massive Change Healthcare…
A week in security (January 20 – January 26)
Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (January 20 – January 26)
Three privacy rules for 2025 (Lock and Code S06E02)
This week on the Lock and Code podcast, host David Ruiz shares three privacy rules for 2025, and they’re all about taking back control. This article has been indexed from Malwarebytes Read the original article: Three privacy rules for 2025…
Texas scrutinizes four more car manufacturers on privacy issues
The Texas Attorney General has requested information of four more car manufacturers about their data handling. This article has been indexed from Malwarebytes Read the original article: Texas scrutinizes four more car manufacturers on privacy issues
Warning: Don’t sell or buy a second hand iPhone with TikTok already installed
iPhones are being offered for sale with TikTok installed after the US ban caused the app to disappear from the app stores. This article has been indexed from Malwarebytes Read the original article: Warning: Don’t sell or buy a second…
7-Zip bug could allow a bypass of a Windows security feature. Update now
A vulnerability in 7-Zip that could allow attackers to bypass the MotW security feature in Windows has been patched. This article has been indexed from Malwarebytes Read the original article: 7-Zip bug could allow a bypass of a Windows security…
AI tool GeoSpy analyzes images and identifies locations in seconds
Forget OSINT, AI-supported tool GeoSpy can determine a person’s location based on their surroundings in a picture. This article has been indexed from Malwarebytes Read the original article: AI tool GeoSpy analyzes images and identifies locations in seconds
Your location or browsing habits could lead to price increases when buying online
Companies are showing customers different prices for the same goods and services based what data they have on them, including details like their precise location or browser history. This article has been indexed from Malwarebytes Read the original article: Your…
A week in security (January 13 – January 19)
Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (January 13 – January 19)
WhatsApp spear phishing campaign uses QR codes to add device
A cybercriminal campaign linked to Russia is deploying QR codes to access the WhatsApp accounts of high-profile targets like journalists, members… This article has been indexed from Malwarebytes Read the original article: WhatsApp spear phishing campaign uses QR codes to…
Avery had credit card skimmer stuck on its site for months
Avery has confirmed its website was compromised by a credit card skimmer that potentially affected over 60,000 customers. This article has been indexed from Malwarebytes Read the original article: Avery had credit card skimmer stuck on its site for months
PlugX malware deleted from thousands of systems by FBI
The FBI has announced it’s deleted PlugX malware from approximately 4,258 US-based computers and networks. This article has been indexed from Malwarebytes Read the original article: PlugX malware deleted from thousands of systems by FBI
The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
An ongoing malvertising campaign steals Google advertiser accounts via fraudulent ads for Google Ads itself. This article has been indexed from Malwarebytes Read the original article: The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
Insurance company accused of using secret software to illegally collect and sell location data on millions of Americans
An insurance company is accused of unlawfully collecting, using, and selling location data from millions of people’s cell phones. This article has been indexed from Malwarebytes Read the original article: Insurance company accused of using secret software to illegally collect…
The new rules for AI and encrypted messaging, with Mallory Knodel (Lock and Code S06E01)
This week on the Lock and Code podcast, we speak with Mallory Knodel about whether AI assistants are compatible with encrypted messaging apps. This article has been indexed from Malwarebytes Read the original article: The new rules for AI and…
iMessage text gets recipient to disable phishing protection so they can be phished
Smishing messages that come with instructions to bypass iMessage’s protection against links are on the rise This article has been indexed from Malwarebytes Read the original article: iMessage text gets recipient to disable phishing protection so they can be phished
A week in security (January 6 – January 12)
A list of topics we covered in the week of January 6 to January 12 of 2025 This article has been indexed from Malwarebytes Read the original article: A week in security (January 6 – January 12)
BayMark Health Services sends breach notifications after ransomware attack
BayMark Health Services, Inc. notified an unknown number of patients that attackers stole their personal and health information. This article has been indexed from Malwarebytes Read the original article: BayMark Health Services sends breach notifications after ransomware attack
Google Chrome AI extensions deliver info-stealing malware in broad attack
At least 36 Google Chrome extensions for AI and VPN tools have begun delivering info-stealing malware in a widespread attack. This article has been indexed from Malwarebytes Read the original article: Google Chrome AI extensions deliver info-stealing malware in broad…
Massive breach at location data seller: “Millions” of users affected
Data broker Gravy Analytics that collects location data and sells it to the US government has been breached. This article has been indexed from Malwarebytes Read the original article: Massive breach at location data seller: “Millions” of users affected
GroupGreeting e-card site attacked in “zqxq” campaign
This article was researched and written by Stefan Dasic, manager, research and response for ThreatDown, powered by Malwarebytes Malwarebytes recently uncovered… This article has been indexed from Malwarebytes Read the original article: GroupGreeting e-card site attacked in “zqxq” campaign
US Cyber Trust Mark logo for smart devices is coming
The White House has launched the Cyber Trust Mark to assist consumers in their quest to buy cybersecure internet connected devices. This article has been indexed from Malwarebytes Read the original article: US Cyber Trust Mark logo for smart devices…
AI-supported spear phishing fools more than 50% of targets
AI-supported spear phishing emails tricked 54% of users in a controlled study that compared AI and human cybercriminal success rates. This article has been indexed from Malwarebytes Read the original article: AI-supported spear phishing fools more than 50% of targets
Dental group lied through teeth about data breach, fined $350,000
US firm Westend Dental was found in violation of several HIPAA rules after denying a data breach associated with ransomware. This article has been indexed from Malwarebytes Read the original article: Dental group lied through teeth about data breach, fined…
Some weeks in security (December 16 – January 5)
A list of topics we covered in the weeks of December 16 to January 5 of 2025 This article has been indexed from Malwarebytes Read the original article: Some weeks in security (December 16 – January 5)
“Can you try a game I made?” Fake game sites lead to information stealers
Invitations to try a beta lead to a fake game website where victims will get an information stealer instead of the promised game This article has been indexed from Malwarebytes Read the original article: “Can you try a game I…
Data breaches in 2024: Could it get any worse?
An overview of what the year 2024 had to offer in the realm of data breaches: Big ones, sensitive data and some duds This article has been indexed from Malwarebytes Read the original article: Data breaches in 2024: Could it…
Connected contraptions cause conniption for 2024
From “spying” air fryers to 3 million rogue toothbrushes, here are the strangest stories about internet-connected home goods in 2024. This article has been indexed from Malwarebytes Read the original article: Connected contraptions cause conniption for 2024
Is nowhere safe from AI slop? (Lock and Code S05E27)
This week on the Lock and Code podcast, we speak with Anna Brading and Mark Stockley about whether anywhere is safe from AI slop. This article has been indexed from Malwarebytes Read the original article: Is nowhere safe from AI…
2024 in AI: It’s changed the world, but it’s not all good
An overview of incidents and news surrounding Artificial Intelligence in 2024. This article has been indexed from Malwarebytes Read the original article: 2024 in AI: It’s changed the world, but it’s not all good
Our Santa wishlist: Stronger identity security for kids
The personal information of children is leaked by trusted institutions which can lead to identity fraud and identity theft This article has been indexed from Malwarebytes Read the original article: Our Santa wishlist: Stronger identity security for kids
‘Fix It’ social-engineering scheme impersonates several brands
Criminals are luring victims looking to download software and tricking them into running a malicious command. This article has been indexed from Malwarebytes Read the original article: ‘Fix It’ social-engineering scheme impersonates several brands
TP-Link faces US national security probe, potential ban on devices
TP-Link is being investigated for alleged predatory pricing practices, which may be driven by ulterior motives. This article has been indexed from Malwarebytes Read the original article: TP-Link faces US national security probe, potential ban on devices
Pallet liquidation scams and how to recognize them
Pallet liquidation is an attractive playing field for online scammers. Will you receive goods or get your credit card details stolen? This article has been indexed from Malwarebytes Read the original article: Pallet liquidation scams and how to recognize them
AI-generated malvertising “white pages” are fooling detection engines
With AI, it’s not only the sky that’s the limit, it’s the entire universe. This article has been indexed from Malwarebytes Read the original article: AI-generated malvertising “white pages” are fooling detection engines
5 million payment card details stolen in painful reminder to monitor Christmas spending
An online repository of screenshots where victims filled out their payment card details online was publicly accessible. This article has been indexed from Malwarebytes Read the original article: 5 million payment card details stolen in painful reminder to monitor Christmas…
Task scams surge by 400%, but what are they?
Task scams are a new type of scams where victims are slowly tricked into paying to get paid for repetitive simple tasks This article has been indexed from Malwarebytes Read the original article: Task scams surge by 400%, but what…
A day in the life of a privacy pro, with Ron de Jesus (Lock and Code S05E26)
This week on the Lock and Code podcast, we speak with Ron de Jesus about the work of achieving user privacy while balancing company goals. This article has been indexed from Malwarebytes Read the original article: A day in the…
A week in security (December 9 – December 15)
A list of topics we covered in the week of December 9 to December 15 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (December 9 – December 15)
Malicious ad distributes SocGholish malware to Kaiser Permanente employees
A fraudulent Google ad meant to phish employees for their login credentials redirects them to a fake browser update page instead. This article has been indexed from Malwarebytes Read the original article: Malicious ad distributes SocGholish malware to Kaiser Permanente…
4.8 million healthcare records left freely accessible
Care1, a Canadian healthcare solutions provider left a cloud storage instance freely accessible and unencrypted for anyone to find. This article has been indexed from Malwarebytes Read the original article: 4.8 million healthcare records left freely accessible
Data brokers should stop trading health and location data, new bill proposes
Senators introduced a bill to stop data brokers from trading in health and location data and enable the FTC to enforce the new rules This article has been indexed from Malwarebytes Read the original article: Data brokers should stop trading…
Update now! Apple releases new security patches for vulnerabilities in iPhones, Macs, and more
Apple has released security patches for most of its operating systems, including iOS, Mac, iPadOS, Safari, and visionOS. This article has been indexed from Malwarebytes Read the original article: Update now! Apple releases new security patches for vulnerabilities in iPhones, Macs, and…
Test page title
Test page heading This article has been indexed from Malwarebytes Read the original article: Test page title
TikTok ban in US: Company seeks emergency injunction to prevent it
TikTok has requested an emergency injunction to stop or postpone the planned ban on the platform in the US. This article has been indexed from Malwarebytes Read the original article: TikTok ban in US: Company seeks emergency injunction to prevent…
Encrypted messaging service intercepted, 2.3 million messages read by law enforcement
Authorities were able to intercept the Matrix messaging service’s traffic and monitor criminal activity for three months. This article has been indexed from Malwarebytes Read the original article: Encrypted messaging service intercepted, 2.3 million messages read by law enforcement
A week in security (December 2 – December 8)
A list of topics we covered in the week of December 2 to December 8 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (December 2 – December 8)
Europol takes down criminal data hub Manson Market in busy month for law enforcement
Two operators and 50 servers that were behind an online marketplace where criminals could buy stolen data have been seized This article has been indexed from Malwarebytes Read the original article: Europol takes down criminal data hub Manson Market in…
Americans urged to use encrypted messaging after large, ongoing cyberattack
US telecom providers have been infiltrated to a worrying level by Chinese APT group Salt Typhoon. The advice is to use encrypted messaging This article has been indexed from Malwarebytes Read the original article: Americans urged to use encrypted messaging…
Crypto’s rising value likely to bring new wave of scams
The value of cryptocurrencies is going through the roof, so the scammers are even more interested in your funds This article has been indexed from Malwarebytes Read the original article: Crypto’s rising value likely to bring new wave of scams
AI chatbot provider exposes 346,000 customer files, including ID documents, resumes, and medical records
AI chatbot provider WotNot left a cloud storage bucket exposed that contained almost 350,000 files, including personally identifiable information. This article has been indexed from Malwarebytes Read the original article: AI chatbot provider exposes 346,000 customer files, including ID documents,…
Malicious QR codes sent in the mail deliver malware
A QR code in a physical letter is a method of spreading malware that may find its way to your mailbox too. This article has been indexed from Malwarebytes Read the original article: Malicious QR codes sent in the mail…
122 million people’s business contact info leaked by data broker
A data broker has confirmed a business contact information database containing 132.8 million records has been leaked online. This article has been indexed from Malwarebytes Read the original article: 122 million people’s business contact info leaked by data broker
Advertisers are pushing ad and pop-up blockers using old tricks
A malvertising campaign using an old school trick was found pushing to different ad blockers. This article has been indexed from Malwarebytes Read the original article: Advertisers are pushing ad and pop-up blockers using old tricks
Scammer robs homebuyers of life savings in $20 million theft spree
A scammer was caught after they defrauded some 400 people for almost $20 million in real estate. This article has been indexed from Malwarebytes Read the original article: Scammer robs homebuyers of life savings in $20 million theft spree
Temu must respect consumer protection laws, says EU
Temu is under investigation for a variety of misleading practices. This article has been indexed from Malwarebytes Read the original article: Temu must respect consumer protection laws, says EU
Warning: Online shopping threats to avoid this Black Friday and Cyber Monday
Where there’s a gift to be bought, there’s also a scammer out to make money. Here’s how to stay safe this shopping season. This article has been indexed from Malwarebytes Read the original article: Warning: Online shopping threats to avoid…
DNA testing company vanishes along with its customers’ genetic data
Atlas Biomed, a DNA testing company that promised clients insights into their genetic disposition has suddenly disappeared. This article has been indexed from Malwarebytes Read the original article: DNA testing company vanishes along with its customers’ genetic data
A week in security (November 4 – November 10)
A list of topics we covered in the week of November 4 to November 10 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (November 4 – November 10)
Hello again, FakeBat: popular loader returns after months-long hiatus
The web browser, and search engines in particular, continue to be a popular entry point to deliver malware to users. While… This article has been indexed from Malwarebytes Read the original article: Hello again, FakeBat: popular loader returns after months-long…
TikTok ordered to close Canada offices following “national security review”
Canada wants TikTok to dissolve its business in the country. TikTok plans to challenge the decision in court This article has been indexed from Malwarebytes Read the original article: TikTok ordered to close Canada offices following “national security review”
Air fryers are the latest surveillance threat you didn’t consider
Consumer group Which? found privacy issues in connected air fryers. How smart do we want and need our appliances to be? This article has been indexed from Malwarebytes Read the original article: Air fryers are the latest surveillance threat you…
Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities
We have great news to share: Malwarebytes has acquired AzireVPN, a privacy-focused VPN provider. This article has been indexed from Malwarebytes Read the original article: Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities
Large eBay malvertising campaign leads to scams
Consumers are being swamped by Google ads claiming to be eBay’s customer service. This article has been indexed from Malwarebytes Read the original article: Large eBay malvertising campaign leads to scams
8 security tips for small businesses
Small businesses have the same security problems as big corporations, but not the budget or staff to match. Here are some tips to help. This article has been indexed from Malwarebytes Read the original article: 8 security tips for small…
Update your Android: Google patches two zero-day vulnerabilities
Google has released patches for two zero-days and a lot of other high level vulnerabilities. This article has been indexed from Malwarebytes Read the original article: Update your Android: Google patches two zero-day vulnerabilities
Warning: Hackers could take over your email account by stealing cookies, even if you have MFA
The FBI has issued a warning that cybercriminals are taking over email accounts via stolen session cookies, whether or not someone has set up MFA. This article has been indexed from Malwarebytes Read the original article: Warning: Hackers could take…
City of Columbus breach affects around half a million citizens
A ransomware attack against the City of Columbus, Ohio—which drew public scrutiny following the city government’s attempt to silence a researcher… This article has been indexed from Malwarebytes Read the original article: City of Columbus breach affects around half a…
Why your vote can’t be “hacked,” with Cait Conley of CISA (Lock and Code S05E23)
This week on the Lock and Code podcast, we speak with Cait Conley about CISA’s election security measures and why your vote can’t be hacked. This article has been indexed from Malwarebytes Read the original article: Why your vote can’t…
Crooks bank on Microsoft’s search engine to phish customers
If you searched for your bank’s login page via Bing recently, you may have visited a fraudulent website enabling criminals to get your credentials and even your two-factor security code. This article has been indexed from Malwarebytes Read the original…
A week in security (October 28 – November 3)
A list of topics we covered in the week of October 28 to November 3 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (October 28 – November 3)
1,000+ web shops infected by “Phish ‘n Ships” criminals who create fake product listings for in-demand products
Fraudsters running the Phish ‘n Ships campaign infected legitimate website and used SEO poisoning to redirect shoppers to their fake web shops This article has been indexed from Malwarebytes Read the original article: 1,000+ web shops infected by “Phish ‘n…
Android malware FakeCall intercepts your calls to the bank
Android malware FakeCall can intercept calls to the bank on infected devices and redirect the target to the criminals. This article has been indexed from Malwarebytes Read the original article: Android malware FakeCall intercepts your calls to the bank
Patch now! New Chrome update for two critical vulnerabilities
Chrome issued a security update that patches two critical vulnerabilities. One of which was reported by Apple This article has been indexed from Malwarebytes Read the original article: Patch now! New Chrome update for two critical vulnerabilities
Update your iPhone, Mac, Watch: Apple issues patches for several vulnerabilities
Apple has issued patches for several of its operating systems. The ones for iOS and iPadOS deserve your immediate attention. This article has been indexed from Malwarebytes Read the original article: Update your iPhone, Mac, Watch: Apple issues patches for…
Europol warns about counterfeit goods and the criminals behind them
There is a whole ecosystem behind the sales and distribution of counterfeit goods. Best to tay away from them. This article has been indexed from Malwarebytes Read the original article: Europol warns about counterfeit goods and the criminals behind them
A week in security (October 21 – October 27)
A list of topics we covered in the week of October 21 to October 27 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (October 21 – October 27)