Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs News Apple Pay phish uses fake support calls to steal payment details February 6, 2026 – This Apple Pay phishing campaign is designed to funnel victims into fake Apple Support calls, where scammers steal payment details. News Open the wrong “PDF” and attackers gain remote access to your PC AI Grok continues producing sexualized images after promised fixes News Flock cameras shared license plate data without permission AI An AI plush toy exposed thousands of private chats with children PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Apple Pay phish uses fake support calls to steal payment details Pieter Arntz February 6, 2026 0 Comments This Apple Pay phishing campaign is designed to funnel victims into fake Apple Support calls, where scammers steal payment details. Open the wrong “PDF” and attackers gain remote access to your PC Pieter Arntz February 5, 2026 0 Comments The DEAD#VAX campaign tricks users into installing AsyncRAT by disguising a virtual hard disk as a PDF attachment. Flock cameras shared license plate data without permission Danny Bradbury February 5, 2026 0 Comments A California city pulled the plug on its entire ALPR system when it found Flock had shared data with hundreds of agencies without permission. Grok continues producing sexualized images after promised fixes Pieter Arntz February 4, 2026 0 Comments Journalists retested Grok and found it still generates offensive images even when told the subjects were vulnerable, non-consenting people. Firefox is giving users the AI off switch Pieter Arntz February 4, 2026 0 Comments Mozilla and other companies are starting to see why giving users a choice over AI features matters. An AI plush toy exposed thousands of private chats with children Pieter Arntz February 3, 2026 0 Comments Around 50,000 chat transcripts between children and Bondu’s AI dinosaur plushie were accessible to anyone with a Google account. AT&T breach data resurfaces with new risks for customers Pieter Arntz February 3, 2026 0 Comments As leaked datasets are merged and enriched, they become more useful to criminals. That makes recycled breach data a bigger risk for customers. Apple’s new iOS setting addresses a hidden layer of location tracking Danny Bradbury February 3, 2026 0 Comments Apple has introduced Limit Precise Location, a new setting that reduces how precisely cellular networks can locate your device, though support is currently limited. [updated] A fake cloud storage alert that ends at Freecash Pieter Arntz February 3, 2026 0 Comments We followed a fake cloud storage payment alert through deceptive affiliate redirects, ending at a familiar destination: Freecash. 1 2 3 … 600 Next Contributors Threat Center Podcast Glossary Scams
