iPhones are being offered for sale with TikTok installed after the US ban caused the app to disappear from the app stores.
Month: January 2025
7-Zip bug could allow a bypass of a Windows security feature. Update now
A vulnerability in 7-Zip that could allow attackers to bypass the MotW security feature in Windows has been patched.
AI tool GeoSpy analyzes images and identifies locations in seconds
Forget OSINT, AI-supported tool GeoSpy can determine a person’s location based on their surroundings in a picture.
Your location or browsing habits could lead to price increases when buying online
Companies are showing customers different prices for the same goods and services based what data they have on them, including details like their precise location or browser history.
A week in security (January 13 – January 19)
Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe!
WhatsApp spear phishing campaign uses QR codes to add device
A cybercriminal campaign linked to Russia is deploying QR codes to access the WhatsApp accounts of high-profile targets like journalists, members…
Avery had credit card skimmer stuck on its site for months
Avery has confirmed its website was compromised by a credit card skimmer that potentially affected over 60,000 customers.
PlugX malware deleted from thousands of systems by FBI
The FBI has announced it’s deleted PlugX malware from approximately 4,258 US-based computers and networks.
The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
An ongoing malvertising campaign steals Google advertiser accounts via fraudulent ads for Google Ads itself.
Insurance company accused of using secret software to illegally collect and sell location data on millions of Americans
An insurance company is accused of unlawfully collecting, using, and selling location data from millions of people’s cell phones.