Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Mobile WhatsApp rolls out new protections against advanced exploits and spyware January 28, 2026 – WhatsApp is strengthening how it handles photos and videos, and introducing Strict Account Settings to limit risky messages from unknown senders. AI Malicious Chrome extensions can spy on your ChatGPT chats Threat Intel Watch out for AT&T rewards phishing text that wants your personal details News Get paid to scroll TikTok? The data trade behind Freecash ads Bugs A WhatsApp bug lets malicious media files spread through group chats Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE BUSINESS BLOG Business Discover the tools, insights, and advice you need to protect your organization. EXPLORE PERSONAL BLOG Personal Get the security news and tips to help you and your family stay safe. EXPLORE PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES Malicious Chrome extensions can spy on your ChatGPT chats Pieter Arntz January 28, 2026 0 Comments Researchers found 16 malicious browser extensions that can quietly hijack active ChatGPT sessions and siphon user data. WhatsApp rolls out new protections against advanced exploits and spyware Pieter Arntz January 28, 2026 0 Comments WhatsApp is strengthening how it handles photos and videos, and introducing Strict Account Settings to limit risky messages from unknown senders. Watch out for AT&T rewards phishing text that wants your personal details Pieter Arntz January 27, 2026 0 Comments Recently, we uncovered a realistic, multi-layered data theft phishing campaign targeting AT&T customers. A WhatsApp bug lets malicious media files spread through group chats Pieter Arntz January 27, 2026 0 Comments Google’s Project Zero team found that WhatsApp can download a malicious media file without you doing anything at all. TikTok narrowly avoids a US ban by spinning up a new American joint venture Danny Bradbury January 27, 2026 0 Comments TikTok may have avoided a ban, but it didn’t become a different company overnight. Like any other social network, assume your data matters, and share accordingly. Get paid to scroll TikTok? The data trade behind Freecash ads Pieter Arntz January 26, 2026 0 Comments Ads promised up to $35 an hour to watch videos. Instead, users were funneled into mobile games designed to drive spending and collect data. One privacy change I made for 2026 (Lock and Code S07E02) Malwarebytes Labs January 26, 2026 0 Comments This week on the Lock and Code podcast, host David Ruiz explains why he's leaving behind Google Search… and what he's replacing it with. A week in security (January 19 – January 25) Malwarebytes Labs January 26, 2026 0 Comments A list of topics we covered in the week of January 19 to January 25 of 2026 Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why? Pieter Arntz January 23, 2026 0 Comments Spammers are abusing Zendesk to flood inboxes with emails from trusted brands. There’s no phishing or malware—just noise. 1 2 3 … 598 Next Contributors Threat Center Podcast Glossary Scams