Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams Watch out for fake Malwarebytes renewal notices in your calendar March 13, 2026 – Scammers are sending fake calendar “renewal” notices impersonating Malwarebytes to trick victims into calling a fake billing number. Bugs This Android vulnerability can break your lock screen in under 60 seconds Bugs Google patches two Chrome zero-days under active attack. Update now Scams Attackers impersonate Temu in ClickFix $Temu airdrop scam Bugs Apple patches Coruna exploit kit flaws for older iOS versions PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Watch out for fake Malwarebytes renewal notices in your calendar Pieter Arntz March 13, 2026 0 Comments Scammers are sending fake calendar “renewal” notices impersonating Malwarebytes to trick victims into calling a fake billing number. Google patches two Chrome zero-days under active attack. Update now Pieter Arntz March 13, 2026 0 Comments Google has released an out-of-band Chrome update to patch two zero-day vulnerabilities that are already being actively exploited. Attackers impersonate Temu in ClickFix $Temu airdrop scam Stefan Dasic March 13, 2026 0 Comments A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor. Apple patches Coruna exploit kit flaws for older iOS versions Pieter Arntz March 12, 2026 0 Comments Apple issued security updates for older iOS and iPadOS versions to close vulnerabilities exploited by the Coruna exploit kit. This Android vulnerability can break your lock screen in under 60 seconds Pieter Arntz March 12, 2026 0 Comments Researchers showed how attackers could pull encryption keys, recover the PIN, and access sensitive data from affected devices. Microsoft Authenticator could leak login codes—update your app now Pieter Arntz March 12, 2026 0 Comments A bug in Microsoft Authenticator on Android and iOS could allow malicious apps on the same device to intercept authentication codes or sign-in links. Meta rolls out anti-scam tools across WhatsApp, Facebook, and Messenger Danny Bradbury March 12, 2026 0 Comments New AI-powered protections aim to detect impersonation attempts, suspicious friend requests, and scam messages. Phishers hide scam links with IPv6 trick in “free toothbrush” emails Pieter Arntz March 11, 2026 0 Comments United Healthcare impersonators are using an IPv6 trick to hide the real destination of phishing links in emails promising free Oral-B toothbrushes. Sextortion “I recorded you” emails reuse passwords found in disposable inboxes Pieter Arntz March 11, 2026 0 Comments “You pervert, I recorded you!” sextortion emails include real passwords harvested from public temporary email inboxes. 1 2 3 … 609 Next Contributors Threat Center Podcast Glossary Scams