Malicious Firefox extensions impersonate popular crypto wallets

Socket’s threat researchers found three malicious Firefox extensions that impersonated the Phantom, Jupiter, and Bitget crypto wallets. Once installed, the malicious extensions stole recovery phrases and private keys, which would provide the attacker with full control of a wallet. A crypto wallet...

Five election scams to watch out for

Elections give scammers plenty to work with: urgent deadlines, familiar faces, passionate supporters, and messages asking people to take action. Some want you to “fix” your voter registration. Others want a donation, an answer to a survey, or payment for merchandise supposedly endorsed by your...

A week in security (October 19 – October 25)

Last week on Malwarebytes Labs: Resident Evil maker Capcom warns of phishing after 11.7 million records exposed Crime Stoppers chapter freezes tips after breach breaks anonymity promise Facebook’s misleading privacy claims land Meta a $25 billion penalty Scammers are finding new ways to target yo...

Sextortion “help” firm took $60 million from victims, FTC alleges

The Federal Trade Commission FTC has filed a complaint accusing Digital Forensics Corporation of exploiting people already targeted by sextortionists. We have talked about sextortion and recovery scams in the past, but we never looked specifically at the combination. Apparently, there is a lot of...

Android happy to check your nudes before you forward them

Sometimes the updates we install to keep our devices safe do a little bit more than we might suspect at first glance. Take the October 2024 Android Security Bulletin. It included a new service called Android System SafetyCore. If you can find a mention of that in the security bulletin, you’re a...

Samsung TVs without mics may listen through soundbars, researcher says

A reverse engineer claims that their Samsung smart TV has been collecting audio without their consent. The researcher, who calls themselves “log4j,” said in an X thread that their 2025 Samsung TV was delivering ads that seemed suspiciously relevant to them. Investigating, they claim to have found...

Fake Calendly “Meta Careers” pages steal Facebook and Google logins

We found a wave of websites posing as Calendly booking pages for job interviews at Meta. Visitors pick a slot for a 30-minute phone call with a recruiter, fill in their details, and pass what looks like a CAPTCHA. Then the page asks them to log in to Facebook. The interview is fake. The pages are...

A week in security (October 5 – October 11)

Last week on Malwarebytes Labs: ASOS breach update: Hackers stole customer details and shopping searches Attackers hijack country-code domains to impersonate Google and other services Amazon has an uncomfortably personal profile on you Meta’s Muse AI files away your friendships, arguments, and...

Binance hit by largest-ever crypto theft, with $6.3 billion stolen

.kadence-column4826169de20c-07 .kt-inside-inner-colpadding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;.kadence-column4826169de20c-07 .kt-inside-inner-colcolumn-gap:var--global-kb-gap-sm, 1rem;.kadence-column4826169de20c-07...

Banks are blocking AI agents from customer accounts

This week, Axios reported that major US banks were detecting third-party AI agents operating inside customer accounts. In many cases, customers have given the agents their usernames and passwords so they could act on their behalf. This kind of access can violate a bank’s rules. Bianco Research...

Artificial Intimacy: Love and lies in the age of AI

AI is becoming a third wheel in relationships, increasingly playing a role in the most intimate parts of our lives. It shows up in the flirty first text, the polished dating profile, the therapized language we use with a partner after a fight, the strength we gather after heartbreak, and everywhe...

Patient records exposed in Quest breach: What you need to know

Quest Diagnostics has confirmed that an unauthorized party accessed a system healthcare providers use to order laboratory tests and view results, affecting personal information and patient records. Quest is a major US laboratory testing company whose services help healthcare professionals diagnos...

Attackers hijack country-code domains to impersonate Google and other services

According to Google, attackers compromised infrastructure behind three country-code domain namespaces—.gh Ghana, .sl Sierra Leone, and .as American Samoa—and used it to obtain unauthorized HTTPS certificates for Google domains and other organizations. These domain endings aren’t limited to sites...

Give your PC a fresh start: New free tools to boost your PC’s speed, security, and peace of mind

If you ever have the feeling your computer is dragging its feet, or shows odd behavior, you’re not alone. In some cases, the culprit is indeed malware, but often it’s something more mundane. Over time, baggage accumulates, much like a toddler’s backpack after a day in the forest. Too many apps...

Photo ID, bank checks, face scan? The UK’s age-check options

As preparation for the UK’s planned social media ban, Ofcom has set out four ways social media platforms could check whether users are aged 16 or over. The government and Parliament will decide how the ban works in practice. Ofcom is the regulator for the communications services in the UK. The BB...

Have an older iPhone or iPad? Apple has a security update for you

Apple’s latest updates include a fix for a CoreGraphics bug that may have been exploited in targeted attacks. The fix is now available for older iPhones and iPads. Apple released security updates on October 26. Apple first fixed the flaw in iOS 26.7.1. Its latest updates also bring the fix to old...

Hackers steal and publish data on 41,000 Homeland Security workers

.kadence-column482644f2c16d-bc .kt-inside-inner-colpadding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;.kadence-column482644f2c16d-bc .kt-inside-inner-colcolumn-gap:var--global-kb-gap-sm, 1rem;.kadence-column482644f2c16d-bc...

Chrome and Firefox updates fix serious security flaws. Install now

On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On...

Applebee’s customer data exposed by password left in app

Applebee’s has fixed a security flaw that exposed customers’ personal information after a researcher discovered a database password embedded in the restaurant chain’s Android app. The researcher, Robert Wiggins, found the password with help from AI. It gave him access to an internal Applebee’s...

Hackers put porn on public billboards and claim it was “far too easy”

While digital billboards are supposed to grab your attention, recent reports from Egypt, Malaysia, and Brazil described them doing so with explicit footage. The cyberattacks were claimed by a group called Leakers$, which said it exploited software used to send content to LED displays. The group...

5 stars for sale: Inside the underground fake review trade

Recently, our team exposed sophisticated scam kits designed to steal sensitive data and trick consumers. But underground marketplaces are not just for malware and stolen passwords. They also offer services designed to manipulate your opinion of the products and services you buy every day. In our...

A week in security (October 26 – November 1)

Last week on Malwarebytes Labs: Fake PDF and search tools hijacked searches for 13.4 million Chrome users Photo ID, bank checks, face scan? The UK’s age-check options Binance hit by largest-ever crypto theft, with $6.3 billion stolen Hackers steal and publish data on 41,000 Homeland Security...

Revolve card breach: 1.5 million people may be affected

.kadence-column484007649ea4-04 .kt-inside-inner-colcolumn-gap:var--global-kb-gap-sm, 1rem;.kadence-column484007649ea4-04 .kt-inside-inner-colflex-direction:column;.kadence-column484007649ea4-04 .kt-inside-inner-col .aligncenterwidth:100%;.kadence-column484007649ea4-04...

A hidden backdoor put 1.3 million TV boxes to work for criminals

.kadence-column4841751ef361-88 .kt-inside-inner-colpadding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;.kadence-column4841751ef361-88 .kt-inside-inner-colcolumn-gap:var--global-kb-gap-sm, 1rem;.kadence-column4841751ef361-88...