Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams Fake GTA 6 Extended Look and demo sites deliver an infostealer August 24, 2026 – Bogus “Play Now” sites are exploiting the GTA 6 leak hype to spread malware that steals passwords stored in browsers. News AliExpress caught using silent audio to fingerprint visitors’ browsers Scams Fake Microsoft security scans trick victims into uninstalling their antivirus Threat Intel Tracking PavinLoader across ClickFix and fake download campaigns Podcast What happens to your data when you die? (Lock and Code S07E17) Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Fake GTA 6 Extended Look and demo sites deliver an infostealer Stefan Dasic August 24, 2026 0 Comments Bogus “Play Now” sites are exploiting the GTA 6 leak hype to spread malware that steals passwords stored in browsers. Fake Microsoft security scans trick victims into uninstalling their antivirus Stefan Dasic August 24, 2026 0 Comments We found fake Microsoft-branded scanners that invent security problems, tell victims to uninstall AV, and then steer them into a refund scam. What happens to your data when you die? (Lock and Code S07E17) Malwarebytes Labs August 24, 2026 0 Comments This week on the Lock and Code podcast, we speak with Tamara Kneese about the many ways your data remains long after your die. AliExpress caught using silent audio to fingerprint visitors’ browsers Pieter Arntz August 24, 2026 0 Comments Silent audio processing on the AliExpress website was found helping to fingerprint visitors’ browsers without relying on cookies. ToxicPanda 2.0 can take over your Android phone and banking apps Pieter Arntz August 24, 2026 0 Comments A new version of the Android banking Trojan can seize control of infected phones and block access to Google Play and Google Play Services. Tracking PavinLoader across ClickFix and fake download campaigns Gabriele Orini August 24, 2026 0 Comments We found PavinLoader being used across ClickFix, fake software, and RenPy campaigns to deliver Amatera Stealer and other malware. A week in security (August 17 – August 23) Malwarebytes Labs August 24, 2026 0 Comments A list of topics we covered in the week of August 17 to August 23 of 2026 Zombie Card: An expired Visa credit card can be used for purchases Pieter Arntz August 21, 2026 0 Comments Scientific research showed that the expiration date on some Visa credit cards can be manipulated in so-called Zombie Card attacks. Medical records, SSNs, and bank details exposed in CareCloud data breach Pieter Arntz August 21, 2026 0 Comments Healthcare technology provider CareCloud confirmed that 3.75 million people were affected by a March data breach. 1 2 3 … 646 Next Contributors Threat Center Podcast Glossary Scams
