Spammers are abusing Zendesk to flood inboxes with emails from trusted brands. There’s no phishing or malware—just noise. This article has been indexed from Malwarebytes Read the original article: Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
Category: Malwarebytes
Fake LastPass maintenance emails target users
LastPass is warning users about phishing emails that pressure users to back up their vaults within 24 hours. This article has been indexed from Malwarebytes Read the original article: Fake LastPass maintenance emails target users
Under Armour ransomware breach: data of 72 million customers appears on the dark web
Customer data allegedly stolen during a ransomware attack on sportswear giant Under Armour is now circulating on the dark web. This article has been indexed from Malwarebytes Read the original article: Under Armour ransomware breach: data of 72 million customers…
Can you use too many LOLBins to drop some RATs?
An attempt to drop two RATs on a system used an uncanny assortment of legitimate Windows tools. This article has been indexed from Malwarebytes Read the original article: Can you use too many LOLBins to drop some RATs?
Malicious Google Calendar invites could expose private data
Researchers showed how prompt injection hidden in a calendar invite can bypass privacy controls and turn an AI assistant into a data-leaking accomplice. This article has been indexed from Malwarebytes Read the original article: Malicious Google Calendar invites could expose…
Fake extension crashes browsers to trick users into infecting themselves
A fake ad blocker crashes your browser, then uses ClickFix tricks to make you run the malware yourself. This article has been indexed from Malwarebytes Read the original article: Fake extension crashes browsers to trick users into infecting themselves
Google will pay $8.25m to settle child data-tracking allegations
Google-owned AdMob allegedly collected kids’ data for ads without parental consent—including IP addresses, usage data, and exact locations. This article has been indexed from Malwarebytes Read the original article: Google will pay $8.25m to settle child data-tracking allegations
Firefox joins Chrome and Edge as sleeper extensions spy on users
Researchers found more sleeper browser extensions that spy on users and install backdoors, this time targeting Firefox users as well. This article has been indexed from Malwarebytes Read the original article: Firefox joins Chrome and Edge as sleeper extensions spy…
A week in security (January 12 – January 18)
Last week on Malwarebytes Labs: Stay safe! This article has been indexed from Malwarebytes Read the original article: A week in security (January 12 – January 18)
WhisperPair exposes Bluetooth earbuds and headphones to tracking and eavesdropping
Researchers demonstrated WhisperPair, a set of attacks that can take control of many widely used Bluetooth earbuds and headphones without user interaction. This article has been indexed from Malwarebytes Read the original article: WhisperPair exposes Bluetooth earbuds and headphones to…
Dutch police sell fake tickets to show how easily scams work
A fake ticket website that ended with a digital finger-wag showed just how many people still fall for concert and sports ticket scams. This article has been indexed from Malwarebytes Read the original article: Dutch police sell fake tickets to…
“Reprompt” attack lets attackers steal data from Microsoft Copilot
Researchers uncovered a way to steal data from Microsoft Copilot users with a single malicious link. This article has been indexed from Malwarebytes Read the original article: “Reprompt” attack lets attackers steal data from Microsoft Copilot
Phishing scammers are posting fake “account restricted” comments on LinkedIn
Fake LinkedIn comments warning of account restrictions are designed to trick users into revealing their login details. This article has been indexed from Malwarebytes Read the original article: Phishing scammers are posting fake “account restricted” comments on LinkedIn
Online shoppers at risk as Magecart skimming hits major payment networks
A Magecart campaign is skimming card data from online checkouts tied to major payment networks, including AmEx, Diners Club, and Mastercard. This article has been indexed from Malwarebytes Read the original article: Online shoppers at risk as Magecart skimming hits…
How real software downloads can hide remote backdoors
Attackers use legitimate open-source software as cover, relying on user trust to compromise systems. We dive into an example. This article has been indexed from Malwarebytes Read the original article: How real software downloads can hide remote backdoors
Data broker fined after selling Alzheimer’s patient info and millions of sensitive profiles
A data broker was fined by California regulators for selling sensitive data on Alzheimer’s patients and millions of others. This article has been indexed from Malwarebytes Read the original article: Data broker fined after selling Alzheimer’s patient info and millions…
Why iPhone users should update and restart their devices now
Apple has confirmed active exploitation, but full protections are limited to iPhones running iOS 26+ (yes, the one with Liquid Glass). This article has been indexed from Malwarebytes Read the original article: Why iPhone users should update and restart their…
Received an Instagram password reset email? Here’s what you need to know
Instagram users received emails last week about purported password reset attempts. At the same time, Instagram data appeared on the dark web. This article has been indexed from Malwarebytes Read the original article: Received an Instagram password reset email? Here’s…
Regulators around the world are scrutinizing Grok over sexual deepfakes
Grok’s apology is unlikely to be the end of the story after the AI tool was used to generate content that may constitute illegal child sexual abuse material. This article has been indexed from Malwarebytes Read the original article: Regulators…
Celebrating reviews and recognitions for Malwarebytes in 2025
In 2025, Malwarebytes was repeatedly tested against real-world threats. Here’s what those tests found. This article has been indexed from Malwarebytes Read the original article: Celebrating reviews and recognitions for Malwarebytes in 2025