Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs This Android vulnerability can break your lock screen in under 60 seconds March 12, 2026 – Researchers showed how attackers could pull encryption keys, recover the PIN, and access sensitive data from affected devices. Bugs Apple patches Coruna exploit kit flaws for older iOS versions Scams Watch out for tax-season robocalls pushing fake “relief programs” Scams Phishers hide scam links with IPv6 trick in “free toothbrush” emails News Sextortion “I recorded you” emails reuse passwords found in disposable inboxes PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Reddit will start warning users that upvote violent content Pieter Arntz March 7, 2025 0 Comments Reddit administratrion announced that the platformwill start sending warnings to users that upvote violent content. Ransomware threat mailed in letters to business owners Malwarebytes Labs March 6, 2025 0 Comments CEOs and business owners received personal, customized ransomware threats in a series of letters sent in the mail through USPS. Android botnet BadBox largely disrupted Pieter Arntz March 6, 2025 0 Comments Removing 24 malicious apps from the Google Play store and silencing some servers has almost halved the BadBox botnet. I spoke to a task scammer. Here’s how it went Pieter Arntz March 5, 2025 0 Comments Task scams are increasing in volume. We followed up on an invitation by a task scammer to get a first hand look on how they work. Android zero-day vulnerabilities actively abused. Update as soon as you can Pieter Arntz March 5, 2025 0 Comments Android's March 2025 security update includes two zero-days which are under active exploitation in targeted attacks. PayPal scam abuses Docusign API to spread phishy emails Pieter Arntz March 4, 2025 0 Comments Phishers are once again using the Docusign API to send out fake documents, this time looking as if they come from PayPal. TikTok: Major investigation launched into platform’s use of children’s data Pieter Arntz March 3, 2025 0 Comments The UK's ICO has started an investgation into how TikTok and other platforms assess age information and compliance with the children’s code for online privacy. A week in security (February 24 – March 2) Malwarebytes Labs March 3, 2025 0 Comments A list of topics we covered in the week of February 24 to March 2 of 2025 Millions of stalkerware users exposed again Pieter Arntz February 28, 2025 0 Comments Three more stalkerware apps have been found to leak data of both victims and customers alike: Spyzie, Cocospy, and Spyic Previous 1 … 65 66 67 68 69 … 609 Next Contributors Threat Center Podcast Glossary Scams
