Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams That “job brief” on Google Forms could infect your device March 20, 2026 – Fake job offers on Google Forms are spreading PureHVNC malware that can take over your device. News Could your face change what you pay? NYC wants limits on biometric tracking Privacy Your tax forms sell for $20 on the dark web Mobile A DarkSword hangs over unpatched iPhones Privacy 90% of people don’t trust AI with their data PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Could your face change what you pay? NYC wants limits on biometric tracking Pieter Arntz March 20, 2026 0 Comments NYC lawmakers are pushing to rein in biometric tracking before it turns into real-world surveillance pricing and customer profiling. That “job brief” on Google Forms could infect your device Gabriele Orini March 20, 2026 0 Comments Fake job offers on Google Forms are spreading PureHVNC malware that can take over your device. A DarkSword hangs over unpatched iPhones Pieter Arntz March 19, 2026 0 Comments Researchers have identified multiple state-level attacks using DarkSword, a chain of vulnerabilities, to infect unpatched iPhones. Your tax forms sell for $20 on the dark web Malwarebytes Labs March 19, 2026 0 Comments Tax season is also peak season for identity theft. Malwarebytes researchers spotted criminals trading stolen tax records on dark web forums. Researchers found font-rendering trick to hide malicious commands Pieter Arntz March 18, 2026 0 Comments Researchers found a way to trick AI assistants into missing dangerous user instructions on a website. Apple patches WebKit bug that could let sites access your data Pieter Arntz March 18, 2026 0 Comments Apple has released a Background Security Improvement that silently fixes a WebKit vulnerability (CVE-2026-20643). Inside a network of 20,000+ fake shops Stefan Dasic March 18, 2026 0 Comments A sprawling network of fake shops, all built for one purpose: to steal your payment details and personal data. Fake Pudgy World site steals your crypto passwords Stefan Dasic March 17, 2026 0 Comments The phishing site it is not affiliated with Igloo Inc or Pudgy Penguins, but is designed to lure fans and steal their crypto passwords. 90% of people don’t trust AI with their data Malwarebytes Labs March 17, 2026 0 Comments AI may be everywhere, but according to our privacy survey, 90% say they don’t trust it with their data, and many are pulling back. 1 2 3 … 611 Next Contributors Threat Center Podcast Glossary Scams