6+ day, 2+ hour ago   (1052+ words) In a recent post, we looked at reports of League of Legends players receiving suspicious friend requests shortly after matches. The accounts quickly steered the conversation toward Discord, where they promoted paid adult-content pages. At the time, one unanswered question…...

3+ week, 3+ day ago   (1340+ words) We identified a network of 41 websites impersonating popular games and Windows software, all designed to push visitors towards the same Download Studio installer. The sites advertise everything from Counter-Strike, Half-Life, Fallout, Roblox, PUBG, and The Witcher to VLC, 7-Zip, Paint....

6+ day, 6+ hour ago   (123+ words) Last week on Malwarebytes Labs: Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android. Try it free → As X expands into payments, users are receiving password-reset emails they didn’t request. Here’s…...

2+ week, 6+ day ago   (1618+ words) In our previous analysis of the malicious RenPy campaigns, we identified a multi-stage loader deployed as part of the infection chain. Further threat hunting has since shown that the same loader, which we track as PavinLoader, is being used across…...

2+ week, 6+ day ago   (120+ words) Last week on Malwarebytes Labs: Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android. Try it free → Scientific research showed that the expiration date on some Visa credit cards can be…...

1+ week, 4+ day ago   (435+ words) Chrome is rolling out an update for its desktop browser. The update includes 26 security fixes, two of which Google rates as critical use-after-free vulnerabilities. The Stable channel has been updated to 152.0.7977.75/.76 for Windows and Mac, and 152.0.7977.75 for Linux. If you…...

5+ day, 19+ hour ago   (456+ words) This week on the Lock and Code podcast… Crooks are taking a holiday. They’re counting on you to fund it. All of these attack models seek to turn sensitive or important data into currency. But an emerging form of digital…...

3+ week, 5+ day ago   (407+ words) Heights Finance is a consumer lender that offers personal installment loans. Reportedly, the company filed a report with Texas regulators mentioning 734,828 affected people, though that figure should not automatically be read as a confirmed nationwide total, since Heights Finance operates…...

3+ week, 4+ day ago   (457+ words) Chrome is rolling out an update for its desktop versions. The update includes 15 security fixes, two of which address critical buffer overflow vulnerabilities. The stable channel has been updated to 151.0.7922.169/.170 for Windows and Mac, and 151.0.7922.169 for Linux. If you don’t…...

2+ week, 6+ day ago   (391+ words) Researchers have uncovered ToxicPanda 2.0, an Android banking Trojan and remote-access tool designed for account takeover and “on-device fraud.” The core objective is on-device fraud. That means that rather than logging in from an attacker-controlled machine, the operator can carry out…...