Malwarebytes

This old-school scam is still working

Fri, 17 Apr 2026 14:34:17 GMT

We sent Tess to investigate a classic Nigerian advance-fee scam with a new twist. Sadly, these old scams are still in play because they work.

“Your shipment has arrived” email hides remote access software

Fri, 17 Apr 2026 07:40:03 GMT

This DHL-themed email tries to get recipients to install remote access software attackers can use to deploy further malware, including ransomware.

Browser Guard gets even better with Access Control

Thu, 16 Apr 2026 12:40:00 GMT

Take control of pesky permission pop-ups and decide exactly which websites can access your camera, microphone, location, and send you notifications.

“iCloud storage is full” scam is back, and now it wants your payment details

Thu, 16 Apr 2026 12:33:11 GMT

Apple users: Watch out for “upgrade now or lose your photos” scams that rush you into handing over your payment details.

A fake Slack download is giving attackers a hidden desktop on your machine

Thu, 16 Apr 2026 09:26:45 GMT

This trojanized Slack installer looks normal, but quietly gives attackers an invisible desktop to access your accounts and data. We take a deep dive into the attack.

Booking.com breach gives scammers what they need to target guests

Thu, 16 Apr 2026 08:02:06 GMT

Guest reservation data stolen from the booking giant can be used by scammers to impersonate hotels to steal payment and personal info.

AI clickbait can turn your notifications into a scam feed

Wed, 15 Apr 2026 17:43:40 GMT

A new AI-driven campaign known as Pushpaganda is using clickbait to turn your browser notifications into a stream of scams and fake alerts.

Fake YouTube copyright notices can steal your Google login

Wed, 15 Apr 2026 13:21:25 GMT

This convincing copyright scam is targeting YouTube creators. Attackers can take over your channel, plus your entire Google account.

From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere

Wed, 15 Apr 2026 10:37:33 GMT

Hiding in imposter sites, GitHub downloads, and YouTube links, this infostealer is designed to hijack accounts and drain cryptocurrency wallets.

April Patch Tuesday fixes two zero-days, including one under active attack

Wed, 15 Apr 2026 09:57:15 GMT

This month’s Patch Tuesday addresses 167 vulnerabilities, including two zero-days that could lead to system compromise, data exposure, and privilege escalation.

Credit Resources Vault: Why this credit email set off our scam alarms

Wed, 15 Apr 2026 09:08:47 GMT

Inside a targeted email campaign that funnels the most vulnerable financial people into handing over sensitive data, and signing up for weekly fees.

Omnistealer uses the blockchain to steal everything it can

Tue, 14 Apr 2026 11:52:15 GMT

This malware is coming for your password managers, saved logins, cloud storage, crypto wallets, and just about anything else it can reach.

ChatGPT under scrutiny as Florida investigates campus shooting

Tue, 14 Apr 2026 09:45:35 GMT

New cases and research suggest AI chatbots don’t always shut down dangerous conversations.

Simply opening a PDF could trigger this Adobe Reader zero-day

Mon, 13 Apr 2026 11:38:36 GMT

Even though it’s patched, Adobe confirmed it was exploited in the wild, so updating is urgent, not optional.

A week in security (April 6 – April 12)

Mon, 13 Apr 2026 07:02:00 GMT

A list of topics we covered in the week of April 6 to April 12 of 2026

Fake Claude site installs malware that gives attackers access to your computer

Fri, 10 Apr 2026 16:16:26 GMT

We found a convincing fake site that installs a trojanized Claude app while quietly deploying PlugX malware.

ClickFix finds a new way to infect Macs

Fri, 10 Apr 2026 15:02:18 GMT

ClickFix campaigns have found a way around macOS Tahoe's warnings against pasting commands in the Terminal. They're using Script Editor instead.

Scammers pose as Amazon support to steal your account

Thu, 09 Apr 2026 13:05:44 GMT

A new wave of Amazon refund scams is spreading, hitting both email inboxes and text messages.

NSFW app leak exposes 70,000 prompts linked to individual users

Thu, 09 Apr 2026 11:02:51 GMT

MyLovelyAI leaked personal data, explicit prompts, and images of over 100,000 users, exposing many to sextortion and doxxing.

30,000 private Facebook images allegedly downloaded by Meta employee

Thu, 09 Apr 2026 10:07:37 GMT

The accused didn't just browse around; he built a custom script designed to circumvent Meta's internal detection systems.

ESET - WeLiveSecurity

That data breach alert might be a trap

Fri, 17 Apr 2026 09:00:00 +0000

Ignoring a real breach notification invites risk, but falling for a bogus one could be even worse. Stop reacting on autopilot.

Supply chain dependencies: Have you checked your blind spot?

Thu, 16 Apr 2026 12:00:00 +0000

Your biggest risk may be a vendor you trust. How can SMBs map their third-party blind spots and build operational resilience?

Recovery scammers hit you when you’re down: Here’s how to avoid a second strike

Fri, 10 Apr 2026 09:00:00 +0000

If you’ve been a victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse.

As breakout time accelerates, prevention-first cybersecurity takes center stage

Tue, 07 Apr 2026 09:00:00 +0000

Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy.

Digital assets after death: Managing risks to your loved one’s digital estate

Wed, 01 Apr 2026 09:00:00 +0000

Fraudsters often target the accounts of the deceased or their grieving relatives. Here’s how to keep the scammers at bay.

This month in security with Tony Anscombe – March 2026 edition

Tue, 31 Mar 2026 08:27:18 +0000

The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan

RSAC 2026 wrap-up – Week in security with Tony Anscombe

Fri, 27 Mar 2026 10:38:21 +0000

This year, AI agents took the center stage – as a defensive capability, but more pressingly as a risk many organizations haven't caught up with

A cunning predator: How Silver Fox preys on Japanese firms this tax season

Fri, 27 Mar 2026 07:00:00 +0000

Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them

Virtual machines, virtually everywhere – and with real security gaps

Wed, 25 Mar 2026 10:00:00 +0000

Cloud VMs offer unmatched speed, scale and flexibility – all of which could eventually count for little if they’re left to fend for themselves

Cloud workload security: Mind the gaps

Tue, 24 Mar 2026 10:00:00 +0000

As IT infrastructure expands, visibility and control often lag behind – until an incident forces a reckoning

Malwarebytes

ESET - WeLiveSecurity

ESET - Support News