Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs News Bogus Avast website fakes virus scan, installs Venom Stealer instead March 27, 2026 – A fake Avast scan tells you your PC is infected, then installs the malware that steals passwords, session data and crypto wallets. Mobile Criminals are renting virtual phones to bypass bank security News Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka News New FCC router ban could leave home networks less secure News GlassWorm attack installs fake browser extension for surveillance PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Criminals are renting virtual phones to bypass bank security Pieter Arntz March 27, 2026 0 Comments Not a real phone, but good enough to fool your bank. Researchers warn criminals are using virtual devices to bypass fraud checks. Bogus Avast website fakes virus scan, installs Venom Stealer instead Stefan Dasic March 27, 2026 0 Comments A fake Avast scan tells you your PC is infected, then installs the malware that steals passwords, session data and crypto wallets. Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka Stefan Dasic March 26, 2026 0 Comments A new macOS infostealer, NukeChain (now Infiniti Stealer), uses fake CAPTCHA pages to trick users into running malicious commands. GlassWorm attack installs fake browser extension for surveillance Pieter Arntz March 26, 2026 0 Comments It hides inside developer tools, then monitors activity and steals data, turning a single infection into a wider risk across the supply chain. Landmark verdicts put Meta’s “addiction machine” platforms on trial Danny Bradbury March 26, 2026 0 Comments Courts are starting to question how platforms are built, not just what’s posted. Hackers claim to have accessed data tied to millions of crime tipsters Pieter Arntz March 25, 2026 0 Comments A hacktivist group claims to have obtained sensitive data on crime tipsters and the people they reported, dating back to 1987. New FCC router ban could leave home networks less secure Pieter Arntz March 25, 2026 0 Comments The FCC announced a ban on routers made outside the US, but it could backfire. Here’s the real risk, and what you can do about it. Meet Khaled Mohamed: the bug hunter who found a Microsoft flaw Pieter Arntz March 25, 2026 0 Comments We talked to Khaled Mohamed on going from script kiddie to bug bounty hunter, and the moment he uncovered a flaw in Microsoft Authenticator. FBI, CISA warn of Russian hackers hijacking Signal and WhatsApp accounts Pieter Arntz March 24, 2026 0 Comments The FBI and CISA join European agencies in warning of a widespread, easily scalable social engineering campaign targeting messaging apps. 1 2 3 … 612 Next Contributors Threat Center Podcast Glossary Scams