Security News Malwarebytes Labs: A week in security (March 10 – March 16)

[Gandalf_The_Grey]

Content source

https://www.malwarebytes.com/blog/news/2025/03/a-week-in-security-march-10-march-16

Last week on Malwarebytes Labs:

• Research on iOS apps shows widespread exposure of secrets
• Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO
• Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”
• The dark side of sports betting: How mirror sites help gambling scams thrive
• Android devices track you before you even sign in
• X users report login troubles as Dark Storm claims cyberattack
• How ads weirdly know your screen brightness, headphone jack use, and location, with Tim Shott (Lock and Code S06E05)
• Fake CAPTCHA websites hijack your clipboard to install information stealers
• Malwarebytes Premium Security awarded “Product of the Year” from AVLab

Last week on ThreatDown:

• ThreatDown is Product of The Year
• March 2025 Patch Tuesday, severity over quantity
• Phishing, now available on your favorite app store!

Stay safe!

A week in security (March 10 - March 16)

A list of topics we covered in the week of March 10 to March 16 of 2025

www.malwarebytes.com

 

[Zero Knowledge]

Still have a soft spot for MB, the fact they still honor lifetime licenses is commendable. And they seem to have improved protection, they sorely need too

 

[Gandalf_The_Grey]

A week in security (March 17 – March 23)

Last week on Malwarebytes Labs:

• What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06)
• Personal data revealed in released JFK files
• Semrush impersonation scam hits Google Ads
• Targeted spyware and why it’s a concern to us
• The “free money” trap: How scammers exploit financial anxiety
• Sperm bank breach deposits data into hands of cybercriminals
• AMOS and Lumma stealers actively spread to Reddit users
• Amazon disables privacy option, will send your Echo voice recordings to the cloud
• Warning over free online file converters that actually install malware
• 1 in 10 people do nothing to stay secure and private on vacation

Last week on ThreatDown:

• Ransomware group Mora_001 targets Fortinet applications
• Product of the Year! AVLab honors ThreatDown Endpoint Protection
• Welcome to the era of macOS stealers
• Introducing ThreatDown OneView free self-serve trial for MSPs
• Ransomware in February 2025—Cl0p and RansomHub run riot

A week in security (March 17 - March 23)

A list of topics we covered in the week of March 17 to March 23 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (March 24 – March 30)

Last week on Malwarebytes Labs:

• Vulnerability in most browsers abused in targeted attacks
• “This fraud destroyed my life.” Man ends up with criminal record after ID was stolen
• Moving from WhatsApp to Signal: A good idea?
• Security expert Troy Hunt hit by phishing attack
• Booking.com phish uses fake CAPTCHAs to trick hotel staff into downloading malware
• DeepSeek users targeted with fake sponsored Google ads that deliver malware
• 23andMe bankruptcy: How to delete your data and stay safe from the 2023 breach
• Oops! Google accidentally deletes some users’ Maps Timeline data

Last week on ThreatDown:

• Why YOUR software is the new malware

A week in security (March 24 - March 30)

A list of topics we covered in the week of March 24 to March 30 of 2025

www.malwarebytes.com