Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams The 2026 World Cup scam economy is already running before the first whistle May 4, 2026 – A four-part scam economy is already forming around the 2026 World Cup, using the tournament’s brand to sell everything from fake visas to worthless tokens. News Thousands of Facebook accounts stolen by phishing emails sent through Google Bugs Actively exploited cPanel bug exposes millions of websites to takeover News More PayPal emails hijacked to deliver tech support scams How to Hackers stole hundreds of thousands of Roblox accounts: Here’s what to do PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Thousands of Facebook accounts stolen by phishing emails sent through Google Pieter Arntz May 4, 2026 0 Comments In an ongoing operation, hackers are hijacking Facebook accounts using Google AppSheet to send phishing emails that pass security checks. The 2026 World Cup scam economy is already running before the first whistle Stefan Dasic May 4, 2026 0 Comments A four-part scam economy is already forming around the 2026 World Cup, using the tournament’s brand to sell everything from fake visas to worthless tokens. A week in security (April 27 – May 3) Malwarebytes Labs May 4, 2026 0 Comments A list of topics we covered in the week of April 27 to May 3 of 2026 3 easy-to-miss cybersecurity risks for small businesses Malwarebytes Labs May 3, 2026 0 Comments Small business owners should be sure to fix these three non-technical risks that require little cybersecurity expertise. Actively exploited cPanel bug exposes millions of websites to takeover Pieter Arntz May 1, 2026 0 Comments A vulnerability in the cPanel/WHM admin interface lets attackers access websites without a username and password. More PayPal emails hijacked to deliver tech support scams Pieter Arntz April 30, 2026 0 Comments We investigate how scammers are abusing PayPal’s systems to push victims into calling fake support numbers. Hackers stole hundreds of thousands of Roblox accounts: Here’s what to do Pieter Arntz April 30, 2026 0 Comments Hackers used fake Roblox “game enhancements” to steal login details from hundreds of thousands of players, then sold the accounts for profit. Researchers built a chatbot that only knows the world before 1931 Danny Bradbury April 29, 2026 0 Comments What happens when you strip the internet out of AI? Researchers built a chatbot that only knows the world before 1931. Microsoft won’t patch PhantomRPC: Feature or bug? Pieter Arntz April 29, 2026 0 Comments A researcher has detailed five ways to exploit PhantomRPC, which Microsoft rates “moderate” and does not plan to fix. 1 2 3 … 619 Next Contributors Threat Center Podcast Glossary Scams
