Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Data breaches Revolve card breach: 1.5 million people may be affected November 3, 2026 – Revolve says shoppers’ saved card details were stolen. A Texas filing suggests as many as 1.5 million people may be affected. Mobile A hidden backdoor put 1.3 million TV boxes to work for criminals Bugs Hackers put porn on public billboards and claim it was “far too easy” Data breaches Applebee’s customer data exposed by password left in app Scams 5 stars for sale: Inside the underground fake review trade Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE A hidden backdoor put 1.3 million TV boxes to work for criminals Pieter Arntz November 3, 2026 0 Comments Videostrong planted a backdoor in more than 1.3 million Android set-top boxes and sold criminals access to the resulting botnet. Hackers put porn on public billboards and claim it was “far too easy” Pieter Arntz November 3, 2026 0 Comments A hacking group called Leakers$ gained access to remote management software for billboards and used it to show porn. Revolve card breach: 1.5 million people may be affected Danny Bradbury November 3, 2026 0 Comments Revolve says shoppers’ saved card details were stolen. A Texas filing suggests as many as 1.5 million people may be affected. 5 stars for sale: Inside the underground fake review trade Malwarebytes Labs November 2, 2026 0 Comments Underground sellers offer five-star reviews and charge up to $1,100 to make negative feedback disappear. Applebee’s customer data exposed by password left in app Pieter Arntz November 2, 2026 0 Comments A researcher found an embedded password in Applebee’s app that exposed customer data. A week in security (October 26 – November 1) Malwarebytes Labs November 2, 2026 0 Comments A list of topics we covered in the week of October 26 to November 1 of 2026 Fake PDF and search tools hijacked searches for 13.4 million Chrome users Pieter Arntz October 30, 2026 0 Comments 319 Chrome extensions sent search queries through servers controlled by their operators, allowing them to see what users searched for. Photo ID, bank checks, face scan? The UK’s age-check options Pieter Arntz October 30, 2026 0 Comments Ofcom has set out four possible age-verification methods for UK’s under-16 social media ban. Binance hit by largest-ever crypto theft, with $6.3 billion stolen Pieter Arntz October 30, 2026 0 Comments Attackers stole about $6.3 billion in cryptocurrency from Binance in what analysts say is the largest crypto theft on record. 1 2 3 … 664 Next Contributors Threat Center Podcast Glossary Scams
