Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams How fake party invitations are being used to install remote access tools February 2, 2026 – “You’re invited!” It sounds friendly, familiar and quite harmless. But in a scam we recently spotted, that simple phrase is being used to trick victims into installing a full remote access tool on… News TikTok’s privacy update mentions immigration status. Here’s why. Data breaches Match, Hinge, OkCupid, and Panera Bread breached by ransomware group Bugs Microsoft Office zero-day lets malicious documents slip past security checks News Clawdbot’s rename to Moltbot sparks impersonation campaign Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE BUSINESS BLOG Business Discover the tools, insights, and advice you need to protect your organization. EXPLORE PERSONAL BLOG Personal Get the security news and tips to help you and your family stay safe. EXPLORE PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES How fake party invitations are being used to install remote access tools Stefan Dasic February 2, 2026 0 Comments “You’re invited!” It sounds friendly, familiar and quite harmless. But in a scam we recently spotted, that simple phrase is being used to trick victims into installing a full remote access tool on… A week in security (January 26 – February 1) Malwarebytes Labs February 2, 2026 0 Comments A list of topics we covered in the week of January 26 to February 1 of 2026 Match, Hinge, OkCupid, and Panera Bread breached by ransomware group Pieter Arntz January 30, 2026 0 Comments ShinyHunters claims to have stolen millions of records from Match Group dating apps and Panera Bread, with very different consequences for users. TikTok’s privacy update mentions immigration status. Here’s why. Danny Bradbury January 30, 2026 0 Comments TikTok updated its privacy policy to mention immigration status, sparking backlash—but the reality is more complicated. Meta confirms it’s working on premium subscription for its apps Pieter Arntz January 29, 2026 0 Comments Details are currently thin, but one thing is clear: paying more is unlikely to buy users meaningful privacy or less tracking. Microsoft Office zero-day lets malicious documents slip past security checks Pieter Arntz January 29, 2026 0 Comments Microsoft issued an emergency patch for a flaw attackers are using to slip malicious code past Office’s document security checks. Clawdbot’s rename to Moltbot sparks impersonation campaign Stefan Dasic January 29, 2026 0 Comments This Moltbot impersonation campaign is a case study in supply-chain risk, brand hijacking, and what happens when open source goes viral. Malicious Chrome extensions can spy on your ChatGPT chats Pieter Arntz January 28, 2026 0 Comments Researchers found 16 malicious browser extensions that can quietly hijack active ChatGPT sessions and siphon user data. WhatsApp rolls out new protections against advanced exploits and spyware Pieter Arntz January 28, 2026 0 Comments WhatsApp is strengthening how it handles photos and videos, and introducing Strict Account Settings to limit risky messages from unknown senders. 1 2 3 … 599 Next Contributors Threat Center Podcast Glossary Scams
