Fraud &amp; Scams

Fake GTA 6 Extended Look and demo sites deliver an infostealer

Bogus “Play Now” sites are exploiting the GTA 6 leak hype to spread malware that steals passwords stored in browsers.

Fake Microsoft security scans trick victims into uninstalling their antivirus

We found fake Microsoft-branded scanners that invent security problems, tell victims to uninstall AV, and then steer them into a r…

Your data doesn’t die when you do (Lock and Code S07E17)

This week on the Lock and Code podcast, we speak with Tamara Kneese about the many ways your data remains long after your die.

AliExpress caught using silent audio to fingerprint visitors’ browsers

Silent audio processing on the AliExpress website was found helping to fingerprint visitors’ browsers without relying on cookies.

ToxicPanda 2.0 can take over your Android phone and banking apps

A new version of the Android banking Trojan can seize control of infected phones and block access to Google Play and Google Play S…

FRAUDKnowBe416 days ago

Human Error Remains at the Core of AI-Enabled Social Engineering

AI is making social engineering attacks significantly more effective, according to a new report from cyber insurance firm Resilien…

Tracking PavinLoader across ClickFix and fake download campaigns

We found PavinLoader being used across ClickFix, fake software, and RenPy campaigns to deliver Amatera Stealer and other malware.

FRAUDMalwarebytes Labs19 days ago

A week in security (August 17 – August 23)

A list of topics we covered in the week of August 17 to August 23 of 2026

FRAUDKnowBe419 days ago

Report: Americans Lose an Estimated $148 Billion to Scams Each Year

Americans are now losing an estimated $148 billion each year to online scams, a 22% increase compared to 2024, according to a new…

Zombie Card: An expired Visa credit card can be used for purchases

Scientific research showed that the expiration date on some Visa credit cards can be manipulated in so-called Zombie Card attacks.

FRAUDhighKnowBe419 days ago

Report: Vishing and Device Code Phishing Are Surging

Social engineering remains a central part of modern cyberattacks, according to a new report from CrowdStrike. Attackers are increa…

FRAUDcriticalMalwarebytes Labs19 days ago

Medical records, SSNs, and bank details exposed in CareCloud data breach

Healthcare technology provider CareCloud confirmed that 3.75 million people were affected by a March data breach.

FRAUDKnowBe419 days ago

Securing the Tip of the Spear: Guam’s Path to Human and AI Resilience

Securing the Tip of the Spear: Guam’s Path to Human and AI Resilience As the Asia-Pacific and Japan (APJ) region continues its…

FRAUDKnowBe420 days ago

Report: One-Quarter of Breaches Are Enabled by AI-Driven Attacks

A new report commissioned by IBM has found that one in four breaches is now AI-enabled, up 56% from last year.

FRAUDKnowBe420 days ago

The Rise of the 'Non-Human Insider': When AI Agents Become the Threat

For years, cybersecurity has had a familiar villain: the external attacker. The hacker breaking through the firewall, stealing cre…

ChatGPT for Teens tackles risky chats and homework shortcuts

OpenAI has strengthened ChatGPT's protections for teens, but some of its strongest parental controls still depend on linked accoun…

Twitch wants your content for Amazon AI training. Here’s how to opt out

Twitch added an option to opt out of training Amazon AI with your content—two years after it confirmed that training had begun.

Your Mac already has a built-in firewall. Here’s how to get more from it

Malwarebytes Firewall gives you a clearer, more intuitive way to manage your Mac's inbuilt firewall.

FRAUDhighKnowBe421 days ago

9 million images of people’s faces exposed by reverse lookup service

A researcher found an exposed database containing 9 million images that belonged to people finder service ClarityCheck.

North Korean Hackers Target LinkedIn Users With Fake Job Offers

Hackers with the North Korean threat actor Famous Chollima are posing as recruiters on LinkedIn and attempting to trick users into…

41 deceptive download sites show a real link, then send you somewhere else

A legitimate-looking link or valid digital signature can offer false reassurance. Here’s why familiar download safety checks aren’…

FRAUDFTC Consumer Protection21 days ago

Sideloading on Android: What it is, why it’s risky, and how to do it more safely

With the new Advanced Flow for sideloading being rolled out, it's time to discuss what sideloading is and how to do it more safely…

FRAUDKnowBe421 days ago

Ransomware Has Changed and Your Defenses Need to Change With It

For years, ransomware was treated mostly as a malware problem. A user clicked something bad, files were encrypted, a ransom note a…

FRAUDKnowBe421 days ago

Vietnam’s Cybersecurity Evolution: Classrooms to Digital Resilience

Navigating the Paradigm Shift in Human Risk Management Vietnam has emerged as a cornerstone of the global digital economy, but…

FRAUDKnowBe421 days ago

Anatomy of an Agent Tesla BEC Attack: From Inbox to In-Memory Infostealer

Lead Analysts: Prabhakaran Ravichandhiran and Jeewan Singh Jalal

FTC Seeks Comment on Enforcement Policy Statement Regarding Personalized Pricing

The Federal Trade Commission today announced it is seeking public comment on an enforcement policy statement regarding personalize…

FRAUDFTC Consumer Protection21 days ago

FTC, Connecticut Secure $4 Million Settlement with Manchester City Nissan Over Deceptive Fees Allegations

The Federal Trade Commission and state of Connecticut today secured a $4 million settlement with a Manchester, Conn., auto dealer…

FRAUDcriticalMalwarebytes Labs21 days ago

Scammers are using fake crypto AML checkers to drain your wallet

We found wallet-checking sites impersonating real anti-money laundering services that trick people into approving access to scamme…

Update Chrome now: Two critical vulnerabilities fixed

Google has released a Chrome desktop update fixing 15 security vulnerabilities, including 2 buffer overflow flaws rated critical.