Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets March 6, 2026 – We uncovered a fake CleanMyMac site delivering SHub Stealer, a macOS infostealer that steals credentials and silently backdoors crypto wallets. News Supreme Court to decide whether geofence warrants are constitutional Mobile High-severity Qualcomm bug hits Android devices in targeted attacks News Does the UK really want to ban VPNs? And can it be done? AI Chrome flaw let extensions hijack Gemini’s camera, mic, and file access PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE One click on this fake Google Meet update can give attackers control of your PC Stefan Dasic March 6, 2026 0 Comments We found a fake Google Meet update that enrolls the victim's Windows PC in an attacker's device management system. Beware of fake OpenClaw installers, even if Bing points you to GitHub Pieter Arntz March 6, 2026 0 Comments Bing search results pointed victims to GitHub repositories claiming to host OpenClaw installers, but in reality they installed malware. Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets Stefan Dasic March 6, 2026 0 Comments We uncovered a fake CleanMyMac site delivering SHub Stealer, a macOS infostealer that steals credentials and silently backdoors crypto wallets. Windows File Shredder: When deleting a file isn’t enough Malwarebytes Labs March 5, 2026 0 Comments File Shredder for Windows from Malwarebytes lets you truly, actually, really delete a file or folder from your hard drive or USB drive. Supreme Court to decide whether geofence warrants are constitutional Danny Bradbury March 5, 2026 0 Comments Google has urged the justices to strike down the controversial warrants, which can sweep up location data from hundreds of phones near a crime scene. Does the UK really want to ban VPNs? And can it be done? Pieter Arntz March 4, 2026 0 Comments Reports of a "Great British Firewall" are exaggerated. And even if they wanted to, here's why it would be virtually impossible. Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks Pieter Arntz March 4, 2026 0 Comments Researchers have found that attackers are abusing OAuth to send users from legitimate Microsoft or Google login pages to phishing sites or malware downloads. High-severity Qualcomm bug hits Android devices in targeted attacks Pieter Arntz March 4, 2026 0 Comments Google has patched 129 Android vulnerabilities, including an actively exploited flaw in a widely used Qualcomm component. Pentagon ditches Anthropic AI over “security risk” and OpenAI takes over Danny Bradbury March 3, 2026 0 Comments At the center of the dispute is how far AI models should be allowed to go inside military systems. 1 2 3 … 607 Next Contributors Threat Center Podcast Glossary Scams
