A threat actor claims to be in possession of 2.8 million records originating from a hack at Canadian retail chain Giant Tiger This article has been indexed from Malwarebytes Read the original article: Giant Tiger breach sees 2.8 million records…
Category: Malwarebytes
A week in security (April 8 – April 14)
A list of topics we covered in the week of April 8 to April 14 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (April 8 – April 14)
How to change your Social Security Number
Wondering whether changing your SSN is an option. Read here what you need to qualify for a new SSN and what you need to get one. This article has been indexed from Malwarebytes Read the original article: How to change…
Apple warns people of mercenary attacks via threat notification system
Apple has sent alerts to people in 92 nations to say it’s detected that they may have been a victim of a mercenary attack. This article has been indexed from Malwarebytes Read the original article: Apple warns people of mercenary…
How to check if your data was exposed in the AT&T breach
We’ve made it easy for you to check if your data has been exposed in the AT&T breach. This article has been indexed from Malwarebytes Read the original article: How to check if your data was exposed in the AT&T…
Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities
Microsoft has fixed 149 vulnerabilities, two of which are reportedly being exploited in the wild. This article has been indexed from Malwarebytes Read the original article: Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities
How to protect yourself from online harassment
Don’t wait for an online harassment campaign to unfairly target you or a loved one. Take these proactive steps today to stay safe. This article has been indexed from Malwarebytes Read the original article: How to protect yourself from online…
Introducing the Digital Footprint Portal
Find out what sensitive data of yours is exposed online today with our new, free Digital Footprint Portal. This article has been indexed from Malwarebytes Read the original article: Introducing the Digital Footprint Portal
New ransomware group demands Change Healthcare ransom
The Change Healthcare ransomware attack as suffered a third cruel twist. This article has been indexed from Malwarebytes Read the original article: New ransomware group demands Change Healthcare ransom
Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla
35-year long identity theft leads to imprisonment for victim
Porn panic imperils privacy online, with Alec Muffett (re-air): Lock and Code S05E08
A week in security (April 1 – April 7)
60% of small businesses are concerned about cybersecurity threats
Cookie consent choices are just being ignored by some websites
Bing ad for NordVPN leads to SecTopRAT
Threat actors are luring victims to a fake NordVPN website that installs a Remote Access Trojan. This article has been indexed from Malwarebytes Read the original article: Bing ad for NordVPN leads to SecTopRAT
Jackson County hit by ransomware, declares state of emergency
Jackson County has suffered “significant disruptions within its IT systems,” and its offices are closed. This article has been indexed from Malwarebytes Read the original article: Jackson County hit by ransomware, declares state of emergency
Google patches critical vulnerability for Androids with Qualcomm chips
Google has issued patches for 28 security vulnerabilities, including a critical patch for Androids with Qualcomm chips. This article has been indexed from Malwarebytes Read the original article: Google patches critical vulnerability for Androids with Qualcomm chips
Google Chrome gets ‘Device Bound Session Credentials’ to stop cookie theft
Google has announced the introduction of Device Bound Session Credentials (DBSC). This article has been indexed from Malwarebytes Read the original article: Google Chrome gets ‘Device Bound Session Credentials’ to stop cookie theft
AT&T confirms 73 million people affected by data breach
Telecommunications giant AT&T has finally confirmed that 73 million current and former customers are caught up in a massive dark web data leak. This article has been indexed from Malwarebytes Read the original article: AT&T confirms 73 million people affected…
Trusted Advisor now available for Mac, iOS, and Android
Our Trusted Advisor dashboard provides an easy-to-understand assessment of your device’s security. This article has been indexed from Malwarebytes Read the original article: Trusted Advisor now available for Mac, iOS, and Android
2024 State of Malware in Education report: Top 6 cyberthreats facing K-12 and Higher Ed
From ransomware to LOTL attacks, the top threats your educational institution needs to be aware of in 2024. This article has been indexed from Malwarebytes Read the original article: 2024 State of Malware in Education report: Top 6 cyberthreats facing…
Free VPN apps turn Android phones into criminal proxies
Researchers have uncovered a campaign that turns Android phones into proxy nodes for malicious purposes. This article has been indexed from Malwarebytes Read the original article: Free VPN apps turn Android phones into criminal proxies
A week in security (March 25 – March 31)
A list of topics we covered in the week of March 25 to March 31 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (March 25 – March 31)
MFA bombing taken to the next level
Cybercriminals have taken MFA bombing to the next level by calling victims of an attack from a spoofed Apple Support number. This article has been indexed from Malwarebytes Read the original article: MFA bombing taken to the next level
How to back up your iPhone to iCloud
An easy-to-understand guide on how to backup your iPhone or iPad to iCloud automatically. This article has been indexed from Malwarebytes Read the original article: How to back up your iPhone to iCloud
How to back up your iPhone to a Mac
An easy-to-understand guide on how to backup your iPhone or iPad to your Mac. This article has been indexed from Malwarebytes Read the original article: How to back up your iPhone to a Mac
How to back up your iPhone to a Windows computer
An easy-to-understand guide on how to back up your iPhone to a Windows computer This article has been indexed from Malwarebytes Read the original article: How to back up your iPhone to a Windows computer
How to back up your Windows 10/11 PC to OneDrive
An easy-to-understand guide on how to back up your Windows PC to OneDrive. This article has been indexed from Malwarebytes Read the original article: How to back up your Windows 10/11 PC to OneDrive
How to back up your Mac
Backing up your Mac is a simple process that can save your most important files from cyberthreats. This article has been indexed from Malwarebytes Read the original article: How to back up your Mac
Stopping a K-12 cyberattack (SolarMarker) with ThreatDown MDR
How experts uncovered a years-long SolarMarker attack on a K-12 district This article has been indexed from Malwarebytes Read the original article: Stopping a K-12 cyberattack (SolarMarker) with ThreatDown MDR
Powering the future of ThreatDown with AI
Dive into where we are with AI and where we’re headed. This article has been indexed from Malwarebytes Read the original article: Powering the future of ThreatDown with AI
Facebook spied on Snapchat users to get analytics about the competition
Facebook is accused of using potentially criminal methods to spy on Snapchat users to gain a commercial advantage over its competition. This article has been indexed from Malwarebytes Read the original article: Facebook spied on Snapchat users to get analytics…
Update Chrome now! Google patches possible drive-by vulnerability
Google has released an update for Chrome to fix seven security vulnerabilities. This article has been indexed from Malwarebytes Read the original article: Update Chrome now! Google patches possible drive-by vulnerability
Meta to abandon social media tracking tool CrowdTangle
Meta will retire social media tracking tool CrowdTangle in August 2024, which is awkward timing given the amount of important elections this year. This article has been indexed from Malwarebytes Read the original article: Meta to abandon social media tracking…
Disturbing robocaller fined $9.9 million
A robocaller that spoofed a local phone number and presented his targets with inflammatory and disturbing content has received a hefty fine. This article has been indexed from Malwarebytes Read the original article: Disturbing robocaller fined $9.9 million
Patch now: Mozilla patches two critical vulnerabilities in Firefox
Mozilla released an update of Firefox to fix two critical security vulnerabilities that together allowed an attacker to escape the sandbox. This article has been indexed from Malwarebytes Read the original article: Patch now: Mozilla patches two critical vulnerabilities in…
YouTube ordered to reveal the identities of video viewers
Federal authorities have asked Google to reveal the identities of people that watched certain videos in at least two investigations. This article has been indexed from Malwarebytes Read the original article: YouTube ordered to reveal the identities of video viewers
Vans warns customers of data breach
Vans warns its customers about phishing and other fraud attacks in the aftermath of a ransomware attack in December This article has been indexed from Malwarebytes Read the original article: Vans warns customers of data breach
Securing your home network is long, tiresome, and entirely worth it, with Carey Parker: Lock and Code S05E07
This week on the Lock and Code podcast, we speak with Carey Parker about the importance and the process of securing your home network. This article has been indexed from Malwarebytes Read the original article: Securing your home network is…
3 important lessons from a devastating ransomware attack
Three things you could learn from the cyber incident review produced by the British Library following its October ransomware attack. This article has been indexed from Malwarebytes Read the original article: 3 important lessons from a devastating ransomware attack
A week in security (March 18 – March 24)
A list of topics we covered in the week of March 18 to March 24 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (March 18 – March 24)
New Go loader pushes Rhadamanthys stealer
A malicious ad for the popular admin tool PuTTY leads victims to a fake site that downloads malware. This article has been indexed from Malwarebytes Read the original article: New Go loader pushes Rhadamanthys stealer
Canada revisits decision to ban Flipper Zero
Since the main reason for the ban was to prevent car thefts that didn’t happen, we’re happy to see the change of heart. This article has been indexed from Malwarebytes Read the original article: Canada revisits decision to ban Flipper…
Patch Ivanti Standalone Sentry and Ivanti Neurons for ITSM now
Ivanti has issued patches for two new vulnerabilities with a high CVSS score. Neither is known to have been explioted in the wild. Yet. This article has been indexed from Malwarebytes Read the original article: Patch Ivanti Standalone Sentry and…
19 million plaintext passwords exposed by incorrectly configured Firebase instances
Researchers scanned the internet for incorrectly configured Firebase instances and what they found was frightening. This article has been indexed from Malwarebytes Read the original article: 19 million plaintext passwords exposed by incorrectly configured Firebase instances
Apex Legends Global Series plagued by hackers
The North American finals of the Apex Legends Global have been postponed after at least two hacking incidents. This article has been indexed from Malwarebytes Read the original article: Apex Legends Global Series plagued by hackers
Tax scammer goes after small business owners and self-employed people
We found a tax scammer that set up a fake website where targets could apply for an Employer Identification Number. This article has been indexed from Malwarebytes Read the original article: Tax scammer goes after small business owners and self-employed…
The ‘AT&T breach’—what you need to know
Data on over 70 million people that came from an alleged breach at AT&T has been posted online. Here’s what you need to know. This article has been indexed from Malwarebytes Read the original article: The ‘AT&T breach’—what you need…
Upcoming webinar: How a leading architecture firm approaches cybersecurity
Learn how top-tier cybersecurity tactics are applied in real-world scenarios. This article has been indexed from Malwarebytes Read the original article: Upcoming webinar: How a leading architecture firm approaches cybersecurity
Social media influencers targeted by identity thieves
Social media influencers are attractive targets for identity thefs. Not just for their bank accounts but also to influence their followers This article has been indexed from Malwarebytes Read the original article: Social media influencers targeted by identity thieves
Store manager admits SIM swapping his customers
A manager at an unnamed telecommunications company has admitted to SIM swapping his customers. This article has been indexed from Malwarebytes Read the original article: Store manager admits SIM swapping his customers
A week in security (March 11 – March 17)
A list of topics we covered in the week of March 11 to March 17 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (March 11 – March 17)
Ransomware’s appetite for US healthcare sees known attacks double in a year
The US healthcare industry suffers more ransomware attacks than most countries. This article has been indexed from Malwarebytes Read the original article: Ransomware’s appetite for US healthcare sees known attacks double in a year
Webinar recap: 6 critical cyberthreats in 2024 and how to counter them
Get expert insights on the six most critical cyberthreats of 2024. This article has been indexed from Malwarebytes Read the original article: Webinar recap: 6 critical cyberthreats in 2024 and how to counter them
TikTok faces ban in US unless it parts ways with Chinese owner ByteDance
A bill that passed the House of Representatives would ban TikTok from the US unless Chinese owner ByteDance gives up its share of the app. This article has been indexed from Malwarebytes Read the original article: TikTok faces ban in…
Malwarebytes Premium blocks 100% of malware during external AVLab test
Malwarebytes Premium for Windows detected and blocked 100% of the malware samples used in AVLab’s January evaluation. This article has been indexed from Malwarebytes Read the original article: Malwarebytes Premium blocks 100% of malware during external AVLab test
ThreatDown achieves perfect score in latest AVLab assessment
ThreatDown has earned a perfect score in the AVLabs test for the eleventh consecutive quarter. This article has been indexed from Malwarebytes Read the original article: ThreatDown achieves perfect score in latest AVLab assessment
How to update outdated software on Mac endpoints: Introducing ThreatDown VPM for Mac
Vulnerability Assessment and Patch Management (VPM) is now available for Mac endpoints. This article has been indexed from Malwarebytes Read the original article: How to update outdated software on Mac endpoints: Introducing ThreatDown VPM for Mac
Microsoft Patch Tuesday March 2024 includes critical Hyper-V flaws
Microsoft patched 61 vulnerabilities in the March 2024 Patch Tuesday round, including two critical flaws in Hyper-V. This article has been indexed from Malwarebytes Read the original article: Microsoft Patch Tuesday March 2024 includes critical Hyper-V flaws
New Facebook photo rule hoax spreads
A hoax telling people to copy and paste a copyright notice on Facebook has been making the rounds since 2012. Can we make it go away? Please! This article has been indexed from Malwarebytes Read the original article: New Facebook…
FakeBat delivered via several active malvertising campaigns
A number of software brands are being impersonated with malicious ads and fake sites to distribute malware. This article has been indexed from Malwarebytes Read the original article: FakeBat delivered via several active malvertising campaigns
Ransomware review: March 2024
February 2024 is likely to be remembered as one of the most turbulent months in ransomware history. This article has been indexed from Malwarebytes Read the original article: Ransomware review: March 2024
Data brokers admit they’re selling information on precise location, kids, and reproductive healthcare
Information newly made available under California law has shed light on data broker practices, including exactly what categories of information they trade in. This article has been indexed from Malwarebytes Read the original article: Data brokers admit they’re selling information…
Going viral shouldn’t lead to bomb threats, with Leigh Honeywell: Lock and Code S05E06
This week on the Lock and Code podcast, we speak with Leigh Honeywell about the cybersecurity defenses to online harassment. This article has been indexed from Malwarebytes Read the original article: Going viral shouldn’t lead to bomb threats, with Leigh…
A week in security (March 4 – March 10)
A list of topics we covered in the week of March 4 to March 10 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (March 4 – March 10)
Patch now! VMWare escape flaws are so serious even end-of-life software gets a fix
The flaws could allow an attacker with privileged access to a guest VM to access the hypervisor on the host. This article has been indexed from Malwarebytes Read the original article: Patch now! VMWare escape flaws are so serious even…
Update now! JetBrains TeamCity vulnerability abused at scale
Users of JetBrains TeamCity on-prmises server need to deal with two serious vulnerabilities. This article has been indexed from Malwarebytes Read the original article: Update now! JetBrains TeamCity vulnerability abused at scale
PetSmart warns customers of credential stuffing attack
Pet retail company PetSmart has emailed customers to alert them to a recent attack that used reused passwords. This article has been indexed from Malwarebytes Read the original article: PetSmart warns customers of credential stuffing attack
Predator spyware vendor banned in US
The US Treasury Department has sanctioned Predator spyware vendor Intellexa Consortium, and banned the company from doing business in the US. This article has been indexed from Malwarebytes Read the original article: Predator spyware vendor banned in US
ALPHV ransomware gang fakes own death, fools no one
The ALPHV gang’s attempt to cover up an exit scam isn’t going well. This article has been indexed from Malwarebytes Read the original article: ALPHV ransomware gang fakes own death, fools no one
Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS
Apple has released a security update for iOS and iPadOS to patch two zero-day vulnerabilities which are reported to already have been exploited. This article has been indexed from Malwarebytes Read the original article: Update your iPhones and iPads now:…
Check your DNS! Abandoned domains used to bypass spam checks
Researchers have uncovered thousands of “subdomailing” campaigns. This article has been indexed from Malwarebytes Read the original article: Check your DNS! Abandoned domains used to bypass spam checks
American Express warns customers about third party data breach
American Express has warned affected customers about a breach at a merchant process that leaked account numbers, names, and card expiration dates. This article has been indexed from Malwarebytes Read the original article: American Express warns customers about third party…
No “Apple magic” as 11% of macOS detections last year came from malware
Last year, 11% of all detections on Macs were caused by malware. The illuminating figure gives a view into the world of Mac cyberthreats. This article has been indexed from Malwarebytes Read the original article: No “Apple magic” as 11%…
Pegasus spyware creator ordered to reveal code used to spy on WhatsApp users
Meta has won a court case against spyware vendor NSO Group to reveal the Pegasus spyware code that allows spying on WhatsApp users. This article has been indexed from Malwarebytes Read the original article: Pegasus spyware creator ordered to reveal…
A week in security (February 26 – March 3)
A list of topics we covered in the week of February 26 to March 3 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (February 26 – March 3)
PikaBot malware on the rise: What organizations need to know
Ransomware gangs are using a powerful new trojan named PikaBot. This article has been indexed from Malwarebytes Read the original article: PikaBot malware on the rise: What organizations need to know
Malicious meeting invite fix targets Mac users
Scammers are attacking Mac users interested in cryptocurrencies using a fake fix for a meeting link that won’t work. This article has been indexed from Malwarebytes Read the original article: Malicious meeting invite fix targets Mac users
Pig butchering scams, how they work and how to avoid them
Pig butchering scams are usually tied to cryptocurrency investments that make for big business with victims on both sides of the line. This article has been indexed from Malwarebytes Read the original article: Pig butchering scams, how they work and…
Airbnb scam sends you to a fake Tripadvisor site, takes your money
One of our researchers was targeted by a scammer advertising on Airbnb and hosting a fake Tripadvisor website. This article has been indexed from Malwarebytes Read the original article: Airbnb scam sends you to a fake Tripadvisor site, takes your…
Facebook bug could have allowed attacker to take over accounts
A vulnerability, now fixed, in Facebook could have allowed an attacker to take over a Facebook account without the victim needing to click on anything at all. This article has been indexed from Malwarebytes Read the original article: Facebook bug…
Stopping a targeted attack on a Managed Service Provider (MSP) with ThreatDown MDR
Detecting and disrupting a months-long malware campaign on an MSP. This article has been indexed from Malwarebytes Read the original article: Stopping a targeted attack on a Managed Service Provider (MSP) with ThreatDown MDR
ALPHV is singling out healthcare sector, say FBI and CISA
CISA, FBI and HHS are warning about the ALPHV/ Blackcat ransomware group targeting the healthcare industry. This article has been indexed from Malwarebytes Read the original article: ALPHV is singling out healthcare sector, say FBI and CISA
One year later, Rhadamanthys is still dropped via malvertising
Infostealers like Rhadamanthys continue to be a favorite among malware distributors who leverage search engine ads to lure victims. This article has been indexed from Malwarebytes Read the original article: One year later, Rhadamanthys is still dropped via malvertising
Change Healthcare outages reportedly caused by ransomware
The cyberattack on Change Healthcare that has been causing a lot of disruptions is likely the work of the BlackCat/ALPHV ransomware gang. This article has been indexed from Malwarebytes Read the original article: Change Healthcare outages reportedly caused by ransomware
Android banking trojans: How they steal passwords and drain bank accounts
Android banking trojans are a serious cyberthreat to everyday users that, through clever trickery, steal passwords and drain bank accounts. This article has been indexed from Malwarebytes Read the original article: Android banking trojans: How they steal passwords and drain…
Identity theft is number one threat for consumers, says report
The German BSI has published its 2023 state of IT security report which names identity theft as the main threat for consumers. This article has been indexed from Malwarebytes Read the original article: Identity theft is number one threat for…
How to make a fake ID online, with Joseph Cox: Lock and Code S05E05
This week on the Lock and Code podcast, we speak with Joseph Cox about how an OnlyFake-generated fake ID fooled a cryptocurrency exchange. This article has been indexed from Malwarebytes Read the original article: How to make a fake ID…
A week in security (February 19 – February 25)
week in security This article has been indexed from Malwarebytes Read the original article: A week in security (February 19 – February 25)
Joomla! patches XSS flaws that could lead to remote code execution
Time to get patching! This article has been indexed from Malwarebytes Read the original article: Joomla! patches XSS flaws that could lead to remote code execution
Update now! ConnectWise ScreenConnect vulnerability needs your attention
ConnectWise customers need to take immediate action to remediate a critical vulnerability. This article has been indexed from Malwarebytes Read the original article: Update now! ConnectWise ScreenConnect vulnerability needs your attention
Why ransomware gangs love using RMM tools—and how to stop them
More and more ransomware gangs are using RMM tools in their attacks. This article has been indexed from Malwarebytes Read the original article: Why ransomware gangs love using RMM tools—and how to stop them
Signal to shield user phone numbers by default
Chat app Signal will shield users’ phone numbers by default from now on. Check whether you need to change your settings to adapt to the new version This article has been indexed from Malwarebytes Read the original article: Signal to…
Vibrator virus steals your personal information
One of our customers found their vibrator was buzzing with a hint of malware. This article has been indexed from Malwarebytes Read the original article: Vibrator virus steals your personal information
A first analysis of the i-Soon data leak
Data from a Chinese cybersecurity vendor that works for the Chinese government exposed a range of hacking tools and services. This article has been indexed from Malwarebytes Read the original article: A first analysis of the i-Soon data leak
ThreatDown EDR update: Streamlined Suspicious Activity investigation
Investigating EDR alerts just got a whole lot easier. This article has been indexed from Malwarebytes Read the original article: ThreatDown EDR update: Streamlined Suspicious Activity investigation
Law enforcement trolls LockBit, reveals massive takedown
Law enforcement has humiliated the humiliators. This article has been indexed from Malwarebytes Read the original article: Law enforcement trolls LockBit, reveals massive takedown
Wyze cameras show the wrong feeds to customers. Again.
Wyze cameras allowed users access to other users’ feeds once again. An estimated 13,000 people got a peek at thumbnails from another user’s home. This article has been indexed from Malwarebytes Read the original article: Wyze cameras show the wrong…
Raccoon Infostealer operator extradited to the United States
A Ukrainian national that is being accused of operating the Raccoon Infostealer in a Malware-as-a-Service has been extradited to the US. This article has been indexed from Malwarebytes Read the original article: Raccoon Infostealer operator extradited to the United States