Healthcare security is failing patients time and again. This week DM Clinical Research and Helath Net Federal Services take the spotlight This article has been indexed from Malwarebytes Read the original article: Healthcare security lapses keep piling up
Category: Malwarebytes
SecTopRAT bundled in Chrome installer distributed via Google Ads
Beware before downloading Google Chrome from a Google search, you might get more than you expected. This article has been indexed from Malwarebytes Read the original article: SecTopRAT bundled in Chrome installer distributed via Google Ads
Google Docs used by infostealer ACRStealer as part of attack
An infostealer known as ACRStealer is using legitimate platforms like Google Docs and Steam as part of an attack. This article has been indexed from Malwarebytes Read the original article: Google Docs used by infostealer ACRStealer as part of attack
DeepSeek found to be sharing user data with TikTok parent company ByteDance
South Korea says it’s uncovered evidence that DeepSeek has secretly been sharing data with ByteDance, the parent company of popular social media app TikTok. This article has been indexed from Malwarebytes Read the original article: DeepSeek found to be sharing…
Protected: zQA Content Editing Styles
There is no excerpt because this is a protected post. This article has been indexed from Malwarebytes Read the original article: Protected: zQA Content Editing Styles
Malwarebytes introduces native ARM support for Windows devices
Malwarebytes now protects ARM-based Windows devices, such as Microsoft’s Surface Pro X and Lenovo’s Yoga laptops. This article has been indexed from Malwarebytes Read the original article: Malwarebytes introduces native ARM support for Windows devices
Google now allows digital fingerprinting of its users
Google is allowing its advertizing customers to fingerprint website visitors. Can you stop it? This article has been indexed from Malwarebytes Read the original article: Google now allows digital fingerprinting of its users
Macs targeted by info stealers in new era of cyberthreats
Info stealers are thriving on Mac, with one specific variant accounting for 70% of all info stealer detections at the end of 2024. This article has been indexed from Malwarebytes Read the original article: Macs targeted by info stealers in…
Hard drives containing sensitive medical data found in flea market
A flea market buyer found medical information about hundreds of patients on second hand decommissioned hard drives. This article has been indexed from Malwarebytes Read the original article: Hard drives containing sensitive medical data found in flea market
A week in security (February 10 – February 16)
A list of topics we covered in the week of February 10 to February 16 of 2025 This article has been indexed from Malwarebytes Read the original article: A week in security (February 10 – February 16)
12 Million Zacks accounts leaked by cybercriminal
A cybercriminal stole a reported 12 million data records on Zacks’ customers and clients. This article has been indexed from Malwarebytes Read the original article: 12 Million Zacks accounts leaked by cybercriminal
How AI was used in an advanced phishing campaign targeting Gmail users
Scammers are once again using AI to take over Gmail accounts. This article has been indexed from Malwarebytes Read the original article: How AI was used in an advanced phishing campaign targeting Gmail users
Fake Etsy invoice scam tricks sellers into sharing credit card information
Etsy sellers are being targeted by scammers that use a legitimate Etsy domain to host their dodgy PDFs. This article has been indexed from Malwarebytes Read the original article: Fake Etsy invoice scam tricks sellers into sharing credit card information
Gambling firms are secretly sharing your data with Facebook
Gambling companies are sharing their users’ data with Meta for marketing and tracking purposes. This article has been indexed from Malwarebytes Read the original article: Gambling firms are secretly sharing your data with Facebook
Phishing evolves beyond email to become latest Android app threat
Android phishing apps are the latest, critical threat for Android users, putting their passwords in danger of new, sneaky tricks of theft. This article has been indexed from Malwarebytes Read the original article: Phishing evolves beyond email to become latest…
Apple fixes zero-day vulnerability used in “extremely sophisticated attack”
Apple has released an out-of-band security update for a vulnerability which it says may have been exploited in an “extremely sophisticated attack against specific targeted individuals.” This article has been indexed from Malwarebytes Read the original article: Apple fixes zero-day…
Apple ordered to grant access to users’ encrypted data
The UK has demanded Apple provides it with a worldwide backdoor into iCloud backups. Privacy organizations are furious. This article has been indexed from Malwarebytes Read the original article: Apple ordered to grant access to users’ encrypted data
A suicide reveals the lonely side of AI chatbots, with Courtney Brown (Lock and Code S06E03)
This week on the Lock and Code podcast, we speak with Courtney Brown about whether an AI chatbot can be blamed for a teenager’s suicide. This article has been indexed from Malwarebytes Read the original article: A suicide reveals the…
A week in security (February 3 – February 9)
Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (February 3 – February 9)
20 Million OpenAI accounts offered for sale
A cybercriminal calling themselves emirking is offering 20 million OpenAI accounts for sale on a Dark Web forum This article has been indexed from Malwarebytes Read the original article: 20 Million OpenAI accounts offered for sale
New scams could abuse brief USPS suspension of inbound packages from China, Hong Kong
News about USPS suspending shipments from China and Hong Kong may give scammers some ideas to defraud consumers This article has been indexed from Malwarebytes Read the original article: New scams could abuse brief USPS suspension of inbound packages from…
University site cloned to evade ad detection distributes fake Cisco installer
Malvertisers got inspired by the website for a German university to bypass ad security and distribute malware. This article has been indexed from Malwarebytes Read the original article: University site cloned to evade ad detection distributes fake Cisco installer
Small business owners, secure your web shop
Web shops are an attractive target. How can SMBs keep theirs safe? This article has been indexed from Malwarebytes Read the original article: Small business owners, secure your web shop
New AI “agents” could hold people for ransom in 2025
“Agentic” AI could arrive in 2025, and it may allow hackers to send individual, AI-powered agents to do their dirty work. This article has been indexed from Malwarebytes Read the original article: New AI “agents” could hold people for ransom…
Valley News Live exposed more than a million job seeker’s resumes
Valley News Live exposed more than a million job seeker’s resumes through an open AWS S3 bucket This article has been indexed from Malwarebytes Read the original article: Valley News Live exposed more than a million job seeker’s resumes
WhatsApp says Paragon is spying on specific users
WhatsApp has accused professional spyware company Paragon of spying on a select group of users. This article has been indexed from Malwarebytes Read the original article: WhatsApp says Paragon is spying on specific users
A week in security (January 27 – February 2)
A list of topics we covered in the week of January 27 to February 2 of 2025 This article has been indexed from Malwarebytes Read the original article: A week in security (January 27 – February 2)
ClickFix vs. traditional download in new DarkGate campaign
Social engineering methods are being put to the test to distribute malware. This article has been indexed from Malwarebytes Read the original article: ClickFix vs. traditional download in new DarkGate campaign
Cybercrime gets a few punches on the nose
Law enforcement took down several cybercrime forums that sold tools and data to other cybercriminals This article has been indexed from Malwarebytes Read the original article: Cybercrime gets a few punches on the nose
Microsoft advertisers phished via malicious Google ads
Just days after we uncovered a campaign targeting Google Ads accounts, a similar attack has surfaced, this time aimed at Microsoft… This article has been indexed from Malwarebytes Read the original article: Microsoft advertisers phished via malicious Google ads
The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?
The sudden rise of DeepSeek has raised questions of data origin, data destination, and the security of the new AI model. This article has been indexed from Malwarebytes Read the original article: The DeepSeek controversy: Authorities ask where does the…
The DeepSeek controversy: Authorities ask where the data comes from and where it goes
Authorities and users are asking questions about the new AI model DeepSeek. Where did the data come from and how safe is it? This article has been indexed from Malwarebytes Read the original article: The DeepSeek controversy: Authorities ask where…
These are the 10 worst PIN codes
Data analysis has shown which 4-digit pin codes offer the best chances for an attacker. Are you using one of them? This article has been indexed from Malwarebytes Read the original article: These are the 10 worst PIN codes
Apple users: Update your devices now to patch zero-day vulnerability
Apple has released a host of security updates for iOS, iPadOS, Mac, Apple Watch, and Apple TV. Update as soon as you can. This article has been indexed from Malwarebytes Read the original article: Apple users: Update your devices now…
UnitedHealth almost doubles victim numbers from massive Change Healthcare data breach
UnitedHealth now estimates that 190 million people were affected by the massive Change Healthcare data breach nearly a year ago. This article has been indexed from Malwarebytes Read the original article: UnitedHealth almost doubles victim numbers from massive Change Healthcare…
A week in security (January 20 – January 26)
Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (January 20 – January 26)
Three privacy rules for 2025 (Lock and Code S06E02)
This week on the Lock and Code podcast, host David Ruiz shares three privacy rules for 2025, and they’re all about taking back control. This article has been indexed from Malwarebytes Read the original article: Three privacy rules for 2025…
Texas scrutinizes four more car manufacturers on privacy issues
The Texas Attorney General has requested information of four more car manufacturers about their data handling. This article has been indexed from Malwarebytes Read the original article: Texas scrutinizes four more car manufacturers on privacy issues
Warning: Don’t sell or buy a second hand iPhone with TikTok already installed
iPhones are being offered for sale with TikTok installed after the US ban caused the app to disappear from the app stores. This article has been indexed from Malwarebytes Read the original article: Warning: Don’t sell or buy a second…
7-Zip bug could allow a bypass of a Windows security feature. Update now
A vulnerability in 7-Zip that could allow attackers to bypass the MotW security feature in Windows has been patched. This article has been indexed from Malwarebytes Read the original article: 7-Zip bug could allow a bypass of a Windows security…
AI tool GeoSpy analyzes images and identifies locations in seconds
Forget OSINT, AI-supported tool GeoSpy can determine a person’s location based on their surroundings in a picture. This article has been indexed from Malwarebytes Read the original article: AI tool GeoSpy analyzes images and identifies locations in seconds
Your location or browsing habits could lead to price increases when buying online
Companies are showing customers different prices for the same goods and services based what data they have on them, including details like their precise location or browser history. This article has been indexed from Malwarebytes Read the original article: Your…
A week in security (January 13 – January 19)
Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (January 13 – January 19)
WhatsApp spear phishing campaign uses QR codes to add device
A cybercriminal campaign linked to Russia is deploying QR codes to access the WhatsApp accounts of high-profile targets like journalists, members… This article has been indexed from Malwarebytes Read the original article: WhatsApp spear phishing campaign uses QR codes to…
Avery had credit card skimmer stuck on its site for months
Avery has confirmed its website was compromised by a credit card skimmer that potentially affected over 60,000 customers. This article has been indexed from Malwarebytes Read the original article: Avery had credit card skimmer stuck on its site for months
PlugX malware deleted from thousands of systems by FBI
The FBI has announced it’s deleted PlugX malware from approximately 4,258 US-based computers and networks. This article has been indexed from Malwarebytes Read the original article: PlugX malware deleted from thousands of systems by FBI
The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
An ongoing malvertising campaign steals Google advertiser accounts via fraudulent ads for Google Ads itself. This article has been indexed from Malwarebytes Read the original article: The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
Insurance company accused of using secret software to illegally collect and sell location data on millions of Americans
An insurance company is accused of unlawfully collecting, using, and selling location data from millions of people’s cell phones. This article has been indexed from Malwarebytes Read the original article: Insurance company accused of using secret software to illegally collect…
The new rules for AI and encrypted messaging, with Mallory Knodel (Lock and Code S06E01)
This week on the Lock and Code podcast, we speak with Mallory Knodel about whether AI assistants are compatible with encrypted messaging apps. This article has been indexed from Malwarebytes Read the original article: The new rules for AI and…
iMessage text gets recipient to disable phishing protection so they can be phished
Smishing messages that come with instructions to bypass iMessage’s protection against links are on the rise This article has been indexed from Malwarebytes Read the original article: iMessage text gets recipient to disable phishing protection so they can be phished
A week in security (January 6 – January 12)
A list of topics we covered in the week of January 6 to January 12 of 2025 This article has been indexed from Malwarebytes Read the original article: A week in security (January 6 – January 12)
BayMark Health Services sends breach notifications after ransomware attack
BayMark Health Services, Inc. notified an unknown number of patients that attackers stole their personal and health information. This article has been indexed from Malwarebytes Read the original article: BayMark Health Services sends breach notifications after ransomware attack
Google Chrome AI extensions deliver info-stealing malware in broad attack
At least 36 Google Chrome extensions for AI and VPN tools have begun delivering info-stealing malware in a widespread attack. This article has been indexed from Malwarebytes Read the original article: Google Chrome AI extensions deliver info-stealing malware in broad…
Massive breach at location data seller: “Millions” of users affected
Data broker Gravy Analytics that collects location data and sells it to the US government has been breached. This article has been indexed from Malwarebytes Read the original article: Massive breach at location data seller: “Millions” of users affected
GroupGreeting e-card site attacked in “zqxq” campaign
This article was researched and written by Stefan Dasic, manager, research and response for ThreatDown, powered by Malwarebytes Malwarebytes recently uncovered… This article has been indexed from Malwarebytes Read the original article: GroupGreeting e-card site attacked in “zqxq” campaign
US Cyber Trust Mark logo for smart devices is coming
The White House has launched the Cyber Trust Mark to assist consumers in their quest to buy cybersecure internet connected devices. This article has been indexed from Malwarebytes Read the original article: US Cyber Trust Mark logo for smart devices…
AI-supported spear phishing fools more than 50% of targets
AI-supported spear phishing emails tricked 54% of users in a controlled study that compared AI and human cybercriminal success rates. This article has been indexed from Malwarebytes Read the original article: AI-supported spear phishing fools more than 50% of targets
Dental group lied through teeth about data breach, fined $350,000
US firm Westend Dental was found in violation of several HIPAA rules after denying a data breach associated with ransomware. This article has been indexed from Malwarebytes Read the original article: Dental group lied through teeth about data breach, fined…
Some weeks in security (December 16 – January 5)
A list of topics we covered in the weeks of December 16 to January 5 of 2025 This article has been indexed from Malwarebytes Read the original article: Some weeks in security (December 16 – January 5)
“Can you try a game I made?” Fake game sites lead to information stealers
Invitations to try a beta lead to a fake game website where victims will get an information stealer instead of the promised game This article has been indexed from Malwarebytes Read the original article: “Can you try a game I…
Data breaches in 2024: Could it get any worse?
An overview of what the year 2024 had to offer in the realm of data breaches: Big ones, sensitive data and some duds This article has been indexed from Malwarebytes Read the original article: Data breaches in 2024: Could it…
Connected contraptions cause conniption for 2024
From “spying” air fryers to 3 million rogue toothbrushes, here are the strangest stories about internet-connected home goods in 2024. This article has been indexed from Malwarebytes Read the original article: Connected contraptions cause conniption for 2024
Is nowhere safe from AI slop? (Lock and Code S05E27)
This week on the Lock and Code podcast, we speak with Anna Brading and Mark Stockley about whether anywhere is safe from AI slop. This article has been indexed from Malwarebytes Read the original article: Is nowhere safe from AI…
2024 in AI: It’s changed the world, but it’s not all good
An overview of incidents and news surrounding Artificial Intelligence in 2024. This article has been indexed from Malwarebytes Read the original article: 2024 in AI: It’s changed the world, but it’s not all good
Our Santa wishlist: Stronger identity security for kids
The personal information of children is leaked by trusted institutions which can lead to identity fraud and identity theft This article has been indexed from Malwarebytes Read the original article: Our Santa wishlist: Stronger identity security for kids
‘Fix It’ social-engineering scheme impersonates several brands
Criminals are luring victims looking to download software and tricking them into running a malicious command. This article has been indexed from Malwarebytes Read the original article: ‘Fix It’ social-engineering scheme impersonates several brands
TP-Link faces US national security probe, potential ban on devices
TP-Link is being investigated for alleged predatory pricing practices, which may be driven by ulterior motives. This article has been indexed from Malwarebytes Read the original article: TP-Link faces US national security probe, potential ban on devices
Pallet liquidation scams and how to recognize them
Pallet liquidation is an attractive playing field for online scammers. Will you receive goods or get your credit card details stolen? This article has been indexed from Malwarebytes Read the original article: Pallet liquidation scams and how to recognize them
AI-generated malvertising “white pages” are fooling detection engines
With AI, it’s not only the sky that’s the limit, it’s the entire universe. This article has been indexed from Malwarebytes Read the original article: AI-generated malvertising “white pages” are fooling detection engines
5 million payment card details stolen in painful reminder to monitor Christmas spending
An online repository of screenshots where victims filled out their payment card details online was publicly accessible. This article has been indexed from Malwarebytes Read the original article: 5 million payment card details stolen in painful reminder to monitor Christmas…
Task scams surge by 400%, but what are they?
Task scams are a new type of scams where victims are slowly tricked into paying to get paid for repetitive simple tasks This article has been indexed from Malwarebytes Read the original article: Task scams surge by 400%, but what…
A day in the life of a privacy pro, with Ron de Jesus (Lock and Code S05E26)
This week on the Lock and Code podcast, we speak with Ron de Jesus about the work of achieving user privacy while balancing company goals. This article has been indexed from Malwarebytes Read the original article: A day in the…
A week in security (December 9 – December 15)
A list of topics we covered in the week of December 9 to December 15 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (December 9 – December 15)
Malicious ad distributes SocGholish malware to Kaiser Permanente employees
A fraudulent Google ad meant to phish employees for their login credentials redirects them to a fake browser update page instead. This article has been indexed from Malwarebytes Read the original article: Malicious ad distributes SocGholish malware to Kaiser Permanente…
4.8 million healthcare records left freely accessible
Care1, a Canadian healthcare solutions provider left a cloud storage instance freely accessible and unencrypted for anyone to find. This article has been indexed from Malwarebytes Read the original article: 4.8 million healthcare records left freely accessible
Data brokers should stop trading health and location data, new bill proposes
Senators introduced a bill to stop data brokers from trading in health and location data and enable the FTC to enforce the new rules This article has been indexed from Malwarebytes Read the original article: Data brokers should stop trading…
Update now! Apple releases new security patches for vulnerabilities in iPhones, Macs, and more
Apple has released security patches for most of its operating systems, including iOS, Mac, iPadOS, Safari, and visionOS. This article has been indexed from Malwarebytes Read the original article: Update now! Apple releases new security patches for vulnerabilities in iPhones, Macs, and…
Test page title
Test page heading This article has been indexed from Malwarebytes Read the original article: Test page title
TikTok ban in US: Company seeks emergency injunction to prevent it
TikTok has requested an emergency injunction to stop or postpone the planned ban on the platform in the US. This article has been indexed from Malwarebytes Read the original article: TikTok ban in US: Company seeks emergency injunction to prevent…
Encrypted messaging service intercepted, 2.3 million messages read by law enforcement
Authorities were able to intercept the Matrix messaging service’s traffic and monitor criminal activity for three months. This article has been indexed from Malwarebytes Read the original article: Encrypted messaging service intercepted, 2.3 million messages read by law enforcement
A week in security (December 2 – December 8)
A list of topics we covered in the week of December 2 to December 8 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (December 2 – December 8)
Europol takes down criminal data hub Manson Market in busy month for law enforcement
Two operators and 50 servers that were behind an online marketplace where criminals could buy stolen data have been seized This article has been indexed from Malwarebytes Read the original article: Europol takes down criminal data hub Manson Market in…
Americans urged to use encrypted messaging after large, ongoing cyberattack
US telecom providers have been infiltrated to a worrying level by Chinese APT group Salt Typhoon. The advice is to use encrypted messaging This article has been indexed from Malwarebytes Read the original article: Americans urged to use encrypted messaging…
Crypto’s rising value likely to bring new wave of scams
The value of cryptocurrencies is going through the roof, so the scammers are even more interested in your funds This article has been indexed from Malwarebytes Read the original article: Crypto’s rising value likely to bring new wave of scams
AI chatbot provider exposes 346,000 customer files, including ID documents, resumes, and medical records
AI chatbot provider WotNot left a cloud storage bucket exposed that contained almost 350,000 files, including personally identifiable information. This article has been indexed from Malwarebytes Read the original article: AI chatbot provider exposes 346,000 customer files, including ID documents,…
Repeat offenders drive bulk of tech support scams via Google Ads
Consumers are getting caught in a web of scams facilitated by online ads often originating from the same perpetrators. This article has been indexed from Malwarebytes Read the original article: Repeat offenders drive bulk of tech support scams via Google…
These cars want to know about your sex life (re-air) (Lock and Code S05E25)
This week on the Lock and Code podcast, we re-air an episode from 2023 about why modern cars want to know about your sex life and a lot more. This article has been indexed from Malwarebytes Read the original article:…
No company too small for Phobos ransomware gang, indictment reveals
The US indictment against an alleged Phobos ransomware kingpin reveals that no company was too small for the cybercriminal gang to hit. This article has been indexed from Malwarebytes Read the original article: No company too small for Phobos ransomware…
A week in security (November 25 – December 1)
A list of topics we covered in the week of November 25 to December 1 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (November 25 – December 1)
Printer problems? Beware the bogus help
Printer issues are very common, but searching Google for help may get you into more trouble than you’d expect. This article has been indexed from Malwarebytes Read the original article: Printer problems? Beware the bogus help
Data broker exposes 600,000 sensitive files including background checks
A researcher has discovered a data broker had stored 644,869 PDF files in a publicly accessible cloud storage container. This article has been indexed from Malwarebytes Read the original article: Data broker exposes 600,000 sensitive files including background checks
Medical testing company LifeLabs failed to protect customer data, report finds
LifeLabs managed to hold up a report about a ransomware incident in court for four years. It’s now been published. This article has been indexed from Malwarebytes Read the original article: Medical testing company LifeLabs failed to protect customer data,…
Explained: the Microsoft connected experiences controversy
Microsoft connected experiences have been the subject of heated online discussions. So what are they, and do they train AI with my data? This article has been indexed from Malwarebytes Read the original article: Explained: the Microsoft connected experiences controversy
Spotify, Audible, and Amazon used to push dodgy forex trading sites and more
Cybercriminals are spamming content platforms like Spotify and Amazon with cracks, keygens, and forex trading platforms. We explain why. This article has been indexed from Malwarebytes Read the original article: Spotify, Audible, and Amazon used to push dodgy forex trading…
“Hilariously insecure”: Andrew Tate’s The Real World breached, 800,000 users affected
Hacktivists have breached Andrew Tate’s learning platform The Real World and obtained 794,000 usernames for current and former members, as well as 324,382 email addresses of former clients. This article has been indexed from Malwarebytes Read the original article: “Hilariously…
A week in security (November 18 – November 24)
A list of topics we covered in the week of November 18 to November 24 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (November 18 – November 24)
Meta takes down more than 2 million accounts in fight against pig butchering
Meta provided some insight into their fight against pig butchering scammers, who are often victims of organized crime themselves This article has been indexed from Malwarebytes Read the original article: Meta takes down more than 2 million accounts in fight…
AI is everywhere, and Boomers don’t trust it
ChatGPT, Google Gemini, and Meta AI may be everywhere, but Baby Boomers don’t trust the tech or the companies behind it. This article has been indexed from Malwarebytes Read the original article: AI is everywhere, and Boomers don’t trust it
Free AI editor lures in victims, installs information stealer instead on Windows and Mac
A widespread social media campaign for EditProAI turns out to spread information stealers for both Windows and MacOS users. This article has been indexed from Malwarebytes Read the original article: Free AI editor lures in victims, installs information stealer instead…
AI Granny Daisy takes up scammers’ time so they can’t bother you
An Artificial Intelligence model called Daisy has been deployed to waste phone scammers’ time so they can’t defraud real people. This article has been indexed from Malwarebytes Read the original article: AI Granny Daisy takes up scammers’ time so they…