A week in security (December 8 – December 14)

Last week on Malwarebytes Labs:

• The US digital doxxing of H-1B applicants is a massive privacy misstep
• Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer
• How private is your VPN?
• DroidLock malware locks you out of your Android device and demands ransom
• Malwarebytes for Mac now has smarter, deeper scans
• [updated]Another Chrome zero-day under attack: update now
• December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices
• GhostFrame phishing kit fuels widespread attacks against millions
• Prompt injection is a problem that may never be fixed, warns NCSC
• EU fines X $140m, tied to verification rules that make impostor scams easier
• Deepfakes, AI resumes, and the growing threat of fake applicants
• How phishers hide banking scams behind free Cloudflare Pages
• Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI

On the ThreatDown blog:

• Tracking remote ransomware attacks at their source

Stay safe!

Let’s face it, an incognito window can only do so much. 
 
Breaches, dark web trading, credit fraud. Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance.