Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs News Chinese engineer stole US military and NASA software for years April 28, 2026 – He created Gmail accounts, impersonated real US researchers, and convinced NASA, the military, and universities to hand over sensitive code. News Fake CAPTCHA scam turns a quick click into a costly phone bill News Medical data of 500,000 UK volunteers listed for sale on Alibaba Bugs Apple fixes iOS bug that kept deleted notifications, including chat previews Threat Intel Malicious trading website drops malware that hands your browser to attackers PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE “iCloud storage is full” scam is back, and now it wants your payment details Pieter Arntz April 16, 2026 0 Comments Apple users: Watch out for “upgrade now or lose your photos” scams that rush you into handing over your payment details. A fake Slack download is giving attackers a hidden desktop on your machine Stefan Dasic April 16, 2026 0 Comments This trojanized Slack installer looks normal, but quietly gives attackers an invisible desktop to access your accounts and data. We take a deep dive into the attack. Booking.com breach gives scammers what they need to target guests Danny Bradbury April 16, 2026 0 Comments Guest reservation data stolen from the booking giant can be used by scammers to impersonate hotels to steal payment and personal info. AI clickbait can turn your notifications into a scam feed Pieter Arntz April 15, 2026 0 Comments A new AI-driven campaign known as Pushpaganda is using clickbait to turn your browser notifications into a stream of scams and fake alerts. Fake YouTube copyright notices can steal your Google login Stefan Dasic April 15, 2026 0 Comments This convincing copyright scam is targeting YouTube creators. Attackers can take over your channel, plus your entire Google account. From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere Gabriele Orini April 15, 2026 0 Comments Hiding in imposter sites, GitHub downloads, and YouTube links, this infostealer is designed to hijack accounts and drain cryptocurrency wallets. April Patch Tuesday fixes two zero-days, including one under active attack Pieter Arntz April 15, 2026 0 Comments This month’s Patch Tuesday addresses 167 vulnerabilities, including two zero-days that could lead to system compromise, data exposure, and privilege escalation. Credit Resources Vault: Why this credit email set off our scam alarms Pieter Arntz April 15, 2026 0 Comments Inside a targeted email campaign that funnels the most vulnerable financial people into handing over sensitive data, and signing up for weekly fees. Omnistealer uses the blockchain to steal everything it can Pieter Arntz April 14, 2026 0 Comments This malware is coming for your password managers, saved logins, cloud storage, crypto wallets, and just about anything else it can reach. Previous 1 2 3 4 5 … 618 Next Contributors Threat Center Podcast Glossary Scams
