Security News Malwarebytes Labs: A week in security

[Gandalf_The_Grey]

Content source

https://www.malwarebytes.com/blog/news/2025/03/a-week-in-security-march-10-march-16

Last week on Malwarebytes Labs:

• Research on iOS apps shows widespread exposure of secrets
• Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO
• Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”
• The dark side of sports betting: How mirror sites help gambling scams thrive
• Android devices track you before you even sign in
• X users report login troubles as Dark Storm claims cyberattack
• How ads weirdly know your screen brightness, headphone jack use, and location, with Tim Shott (Lock and Code S06E05)
• Fake CAPTCHA websites hijack your clipboard to install information stealers
• Malwarebytes Premium Security awarded “Product of the Year” from AVLab

Last week on ThreatDown:

• ThreatDown is Product of The Year
• March 2025 Patch Tuesday, severity over quantity
• Phishing, now available on your favorite app store!

Stay safe!

A week in security (March 10 - March 16)

A list of topics we covered in the week of March 10 to March 16 of 2025

www.malwarebytes.com

 

[Zero Knowledge]

Still have a soft spot for MB, the fact they still honor lifetime licenses is commendable. And they seem to have improved protection, they sorely need too

 

[Gandalf_The_Grey]

A week in security (March 17 – March 23)

Last week on Malwarebytes Labs:

• What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06)
• Personal data revealed in released JFK files
• Semrush impersonation scam hits Google Ads
• Targeted spyware and why it’s a concern to us
• The “free money” trap: How scammers exploit financial anxiety
• Sperm bank breach deposits data into hands of cybercriminals
• AMOS and Lumma stealers actively spread to Reddit users
• Amazon disables privacy option, will send your Echo voice recordings to the cloud
• Warning over free online file converters that actually install malware
• 1 in 10 people do nothing to stay secure and private on vacation

Last week on ThreatDown:

• Ransomware group Mora_001 targets Fortinet applications
• Product of the Year! AVLab honors ThreatDown Endpoint Protection
• Welcome to the era of macOS stealers
• Introducing ThreatDown OneView free self-serve trial for MSPs
• Ransomware in February 2025—Cl0p and RansomHub run riot

A week in security (March 17 - March 23)

A list of topics we covered in the week of March 17 to March 23 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (March 24 – March 30)

Last week on Malwarebytes Labs:

• Vulnerability in most browsers abused in targeted attacks
• “This fraud destroyed my life.” Man ends up with criminal record after ID was stolen
• Moving from WhatsApp to Signal: A good idea?
• Security expert Troy Hunt hit by phishing attack
• Booking.com phish uses fake CAPTCHAs to trick hotel staff into downloading malware
• DeepSeek users targeted with fake sponsored Google ads that deliver malware
• 23andMe bankruptcy: How to delete your data and stay safe from the 2023 breach
• Oops! Google accidentally deletes some users’ Maps Timeline data

Last week on ThreatDown:

• Why YOUR software is the new malware

A week in security (March 24 - March 30)

A list of topics we covered in the week of March 24 to March 30 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (March 31 – April 6)

Last week on Malwarebytes Labs:

• Why we’re no longer doing April Fools’ Day
• Intimate images from kink and LGBTQ+ dating apps left exposed online
• “Urgent reminder” tax scam wants to phish your Microsoft credentials
• “Nudify” deepfakes stored unprotected online
• Location, name, and photos of random kids shown to parents in child tracker mix up
• QR codes sent in attachments are the new favorite for phishers
• Popular VPNs are routing traffic via Chinese companies, including one with link to military
• Flaw in Verizon call record requests put millions of Americans at risk

Last week on ThreatDown:

• Fake Booking.com emails target hotels

A week in security (March 31 - April 6)

A list of topics we covered in the week of March 31 to April 6 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (April 7 – April 13)

Last week on Malwarebytes Labs:

• The Pall Mall Pact and why it matters
• Child predators are lurking on dating apps, warns report
• Your 23andMe genetic data could be bought by China, senator warns
• WhatsApp for Windows vulnerable to attacks. Update now!
• Man accused of using keylogger to spy on colleagues, log in to their personal accounts and watch them at home
• 72% of people are worried their data is being misused by the government, and that’s not all…
• Tax deadline threat: QuickBooks phishing scam exploits Google Ads
• Google AI taken for a ride by April Fools’ Day joke
• Google fixes two actively exploited zero-day vulnerabilities in Android
• Is your phone listening to you? (Lock and Code S06E07)
• Toll fee scams are back and heading your way

Last week on ThreatDown:

• April 2025 Patch Tuesday includes one zero-day
• One in five Fortune 500 companies had leaked credentials in the past 30 days

A week in security (April 7 - April 13)

A list of topics we covered in the week of April 7 to April 13 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (April 12 – April 18)

Last week on Malwarebytes Labs:

• Text scams grow to steal hundreds of millions of dollars
• Apple patches security vulnerabilities in iOS and iPadOS. Update now!
• Hi, robot: Half of all internet traffic now automated
• “I sent you an email from your email account,” sextortion scam claims
• “Follow me” to this fake crypto exchange to claim $500
• Hertz data breach caused by CL0P ransomware attack on vendor
• Meta slurps up EU user data for AI training
• No, it’s not OK to delete that new inetpub folder
• Malwarebytes named “Best Antivirus Software” and “Best Malware Removal Service”

Last week on ThreatDown:

• Save our CVE! Last minute rescue for critical cybersecurity service
• Has AI changed malicious script obfuscation techniques?
• Celebrating our Partners of the Year: recognizing excellence and innovation
• Living off the Land (LOTL) attacks: Detecting ransomware gangs hiding in plain sight

A week in security (April 12 - April 18)

A list of topics we covered in the week of April 12 to April 18 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (April 21 – April 27)

Last week on Malwarebytes Labs:

• AI is getting “creepy good” at geo-guessing
• Zoom attack tricks victims into allowing remote access to install malware and steal money
• Android malware turns phones into malicious tap-to-pay machines
• 4.7 million customers’ data accidentally leaked to Google by Blue Shield of California
• Shopify faces privacy lawsuit for collecting customer data
• All Gmail users at risk from clever replay attack
• Did DOGE “breach” Americans’ data? (Lock and Code S06E08)

Last week on ThreatDown:

• New in Nebula & OneView: CVE Tags for Ransomware-Linked Vulnerabilities

A week in security (April 21 - April 27)

A list of topics we covered in the week of April 21 to April 27 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (April 27 – May 3)

Last week on Malwarebytes Labs:

• On world password day, Microsoft says fewer passwords, more passkeys
• Apple AirPlay SDK devices at risk of takeover—make sure you update
• The 3 biggest cybersecurity threats to small businesses
• Zero-day attacks on browsers and smartphones drop, says Google
• Fake Social Security Statement emails trick users into installing remote tool
• Digital rampage saw ex-Disney employee remove nut allergy info from menus, dox co-workers, and more
• What privacy? Perplexity wants your data, builds browser to track you and serve ads
• Employee monitoring app exposes users, leaks 21+ million screenshots

Last week on ThreatDown:

• Where malware likes to hide the most
• Ransomware in March 2025

A week in security (April 27 - May 3)

A list of topics we covered in the week of April 27 to May 3 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (May 4 – May 10)

Last week on Malwarebytes Labs:

• The AI chatbot cop squad is here (Lock and Code S06E09)
• Android fixes 47 vulnerabilities, including one zero-day. Update as soon as you can!
• “Your privacy is a promise we don’t break”: Dating app Raw exposes sensitive user data
• FBI issues warning as scammers target victims of crime
• WhatsApp hack: Meta wins payout over NSO Group spyware
• Passwords in the age of AI: We need to find alternatives
• Tired of Google sponsored ads? So are we! That’s why we’re introducing the option to block them on iOS
• Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
• Google Chrome will use AI to block tech support scam websites

Last week on ThreatDown:

• Ransomware in April 2025—RansomHub is gone

A week in security (May 4 - May 10)

A list of topics we covered in the week of May 4 to May 10 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (May 12 – May 18)

Last week on Malwarebytes Labs:

• Data broker protection rule quietly withdrawn by CFPB
• Meta sent cease and desist letter over AI training
• Google to pay $1.38 billion over privacy violations
• Android users bombarded with unskippable ads

Last week on ThreatDown:

• ThreatDown introduces Firewall Management
• Introducing Browser Phishing Protection: enhanced web security for your organization

A week in security (May 12 - May 18)

A list of topics we covered in the week of May 12 to May 18 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (May 19 – May 25)

Last week on Malwarebytes Labs:

• Lumma information stealer infrastructure disrupted
• Stalkerware apps go dark after data breach
• Scammers are using AI to impersonate senior officials, warns FBI
• 23andMe and its customers’ genetic data bought by a pharmaceutical org
• Malware-infected printer delivered something extra to Windows users
• How Los Angeles banned smartphones in schools (Lock and Code S06E10)
• Update your Chrome to fix serious actively exploited vulnerability

Last week on ThreatDown:

May 2025 Patch Tuesday includes five zero-day vulnerabilities

A week in security (May 19 - May 25)

A list of topics we covered in the week of May 19 to May 25 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (May 26 – June 1)

Last week on Malwarebytes Labs:

• Porn sites probed for allegedly failing to prevent minors from accessing content
• Take back control of your browser—Malwarebytes Browser Guard now blocks search hijacking attempts
• Deepfake-posting man faces huge $450,000 fine
• Fake AI video generator tools lure in Facebook and LinkedIn users to deliver malware
• New warning issued over toll fee scams
• 184 million logins for Instagram, Roblox, Facebook, Snapchat, and more exposed online

Last week on ThreatDown:

• KMSpico explained: No, KMS is not “kill Microsoft”
• When you shouldn’t trust a trusted root certificate

Stay safe!

A week in security (May 26 - June 1)

A list of topics we covered in the week of May 26 to June 1 of 2025

www.malwarebytes.com

 

[Tomoko]

A week in security (May 26 – June 1)

A week in security (May 26 - June 1)

A list of topics we covered in the week of May 26 to June 1 of 2025

www.malwarebytes.com

wow this all sounds like a pretty serious problem, I have nothing to worry about because my Roblox account has two-factor authentication

 

[Zero Knowledge]

KMSpico? Wow that brings back memories.

 

[Gandalf_The_Grey]

A week in security (June 1 – June 7)

Last week on Malwarebytes Labs:

• What does Facebook know about me? (Lock and Code S06E11)
• Victims risk AsyncRAT infection after being redirected to fake Booking.com sites
• Juice jacking warnings are back, with a new twist
• The North Face warns customers about potentially stolen data
• Scammers are constantly changing the game, but so are we. Introducing Malwarebytes Scam Guard
• Google fixes another actively exploited vulnerability in Chrome, so update now!
• Ransomware hiding in fake AI, business tools
• Pornhub, RedTube, and YouPorn block access in France, VPN use set to soar
• Booking.com reservation abused as cybercriminals steal from travelers
• OpenAI forced to preserve ChatGPT chats
• How to update Chrome on every operating system

Last week on ThreatDown:

• ThreatDown introduces auto-isolation
• EDR vs MDR vs XDR – What’s the Difference?
• Criminals smuggle phishing code in SVG images

A week in security (June 1 - June 7)

A list of topics we covered in the week of June 1 to June 7 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (June 9 – June 15)

Last week on Malwarebytes Labs:

• Been scammed online? Here’s what to do
• How and where to report an online scam
• Google bug allowed phone number of almost any user to be discovered
• 44% of people encounter a mobile scam every single day, Malwarebytes finds
• GirlsDoPorn owner faces life in jail after pleading guilty to sex trafficking
• 23andMe raked by Congress on privacy, sale of genetic data
• US airline industry quietly selling flight data to DHS
• Your Meta AI chats might be public, and it’s not a bug

Last week on ThreatDown:

• June 2025 Microsoft Patch Tuesday fixes two zero-days

Stay safe!

A week in security (June 9 - June 15)

A list of topics we covered in the week of June 9 to June 15 of 2025

www.malwarebytes.com

 

[Gandalf_The_Grey]

A week in security (June 15 – June 21)

Last week on Malwarebytes Labs:

• The data on denying social media for kids (re-air) (Lock and Code S06E12)
• Reddit’s new AI-powered tools scan your posts to serve you better ads
• Smart air fryers ordered to stop invading our digital privacy
• WhatsApp to start targeting you with ads
• Scammers hijack websites of Bank of America, Netflix, Microsoft, and more to insert fake phone number
• 5 riskiest places to get scammed online
• Fake bank ads on Instagram scam victims out of money
• Mattel’s going to make AI-powered toys, kids’ rights advocates are worried
• Billions of logins for Apple, Google, Facebook, Telegram, and more found exposed online

Last week on ThreatDown:

• Atomic Stealer now using clipboard hijacking to target Macs
• SimpleHelp exploited by DragonForce ransomware group

Stay safe!

A week in security (June 15 - June 21)

A list of topics we covered in the week of June 15 to June 21 of 2025

www.malwarebytes.com

 

[Tomoko]

A week in security (June 15 – June 21)

A week in security (June 15 - June 21)

A list of topics we covered in the week of June 15 to June 21 of 2025

www.malwarebytes.com

the only thing I heard its about billions of login from TikTok, we all must be safe

 

[Gandalf_The_Grey]

A week in security (June 23 – June 29)

Last week on Malwarebytes Labs:

• Gmail’s multi-factor authentication bypassed by hackers to pull off targeted attacks
• Thousands of private camera feeds found online. Make sure yours isn’t one of them
• Sextortion email scammers increase their “Hello pervert” money demands
• Many data brokers are failing to register with state consumer protection agencies
• Facial recognition: Where and how you can opt out
• Why the Do Not Call Registry doesn’t work
• Jailbroken AIs are helping cybercriminals to hone their craft
• Fake DocuSign email hides tricky phishing attempt

A week in security (June 23 - June 29)

A list of topics we covered in the week of June 23 to June 29 of 2025

www.malwarebytes.com