Fraud & Scams

Survey: Companies Cite Phishing as their Top AI-Enabled Fraud Concern

A recent survey from Experian found that 60% of companies report fraud losses that are “somewhat or significantly higher” than in…

Crypto customers targeted by scammers after email marketing provider breach

A breach at email marketing company Brevo exposed Trezor, CoinTracking, and BitBox customers to phishing emails, but others may al…

Phishing Campaign Targets Employees with Malicious SVG Files

Researchers at INKY observed a major phishing campaign that used SVG (Scalable Vector Graphics) image files to deliver malicious J…

Android malware creates a hidden copy of your banking app

The Gigabud banking Trojan can clone a banking app into a separate work profile on an Android device to help hide fraudulent trans…

BlueMoon exploit kit turns Chrome and Windows flaws into attacks

Four different espionage groups used the same exploit kit to target recently fixed flaws, showing why “patch later” is a dangerous…

Will AI kill us all within the next decade?

AI researchers are warning that the technology could kill us all within the next decade, although they say the risk from current m…

The Workforce Has a Blind Spot, and It’s Ringing

With inboxes increasingly well guarded, cybercriminals are turning to a more vulnerable front in their attacks against your digita…

Direct Send: How Attackers Weaponize Your Infrastructure Against You

Lead Analysts: Prabhakaran Ravichandhiran, Jeewan Singh Jalal

Update Chrome now to protect against an actively exploited vulnerability

Chrome issues another monster update, fixing an actively exploited V8 vulnerability and 229 other flaws.

Copyright scammers get Instagram accounts suspended and demand payment

Scammers are filing fraudulent copyright complaints to suspend Instagram accounts, then demanding payment to withdraw them.

More than 100,000 fake stores are out to steal your card details

DoppelCart’s fake stores copy real retailers and steal shoppers’ card details and one-time bank confirmation codes.

CyberheistNews Vol 16 #36 [Text Alert] Don't Reply to a "Wrong Number." You Will Become a Scam Target

FTC Withdraws Obsolete Policy Statement

The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices. This cont…

Microsoft fixes record 964 flaws, including 2 exploited zero-days

Microsoft’s September 2026 Patch Tuesday fixes a record 964 vulnerabilities, including two actively exploited zero-days.

The push to stop algorithms controlling social media feeds has begun

Australia is proposing a law that gives people a choice over what fills their feeds. It may not be long before other countries dem…

Greatness Phishing Kit Can Now Launch Sophisticated Attacks

Researchers at ZeroBEC are tracking a phishing platform called “Greatness” that’s been significantly upgraded since it surfaced in…

Why Your Security Program Needs a Quantum Upgrade Now

Quantum Readiness Day on 24 September is a useful reminder that the security work we do today is not only about preventing breache…

Grindr settles HIV status data-sharing lawsuit for $35 million

Grindr has settled a UK lawsuit alleging that it shared sensitive user data, including HIV status, with advertising companies.

FTC Takes Action Against Payment Processor Humboldt Merchant Services for Knowingly Facilitating Payment Processing for Sham Merchants

Payment processing company Humboldt Merchant Services will pay $12 million and be permanently banned from processing payments for…

MikroTik router flaws allow takeover without a password

Attackers are exploiting critical RouterOS flaws to take control of routers with SSH exposed to the internet.

Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)

This week on the Lock and Code podcast, we speak with Kim Sutherland about loyalty points fraud and how everyday people can stay s…

LG TV flaws could let attackers listen in, even in standby mode

Testing found that LG smart TVs can track viewing and scan home networks, while security flaws could let attackers record conversa…

Flirty OnlyFans promoters on X may be using AI to appear human

Personalized replies and voice notes make it increasingly difficult to tell whether you’re talking to a human, chatbot, or AI agen…

A week in security (August 31 – September 6)

Last week on Malwarebytes Labs: Stay safe!

Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy

Lead Analysts: Prabhakaran Ravichandhiran, Jeewan Singh Jalal, Karthikeyan Dharmaraj and Sripathi Kumar

The hidden work of modernizing Malwarebytes

Why disciplined dependency modernization is one of the highest-leverage engineering investments a security product can make.

Your KnowBe4 Fresh Content Updates from August 2026

X Money rollout linked to password-reset attacks

As X expands into payments, users are receiving password-reset emails they didn’t request. Here’s what may be happening and how to…

Payment Processor Nuvei Must Implement Robust Merchant Screening Practices and Pay $4.85 Million to Settle FTC Charges that the Firm Facilitated Merchant Fraud

Global payment processor Nuvei will pay $4.85 million to settle the Federal Trade Commission’s charges that the firm opened and ma…

Free streaming boxes may be routing criminal traffic through your home

Researchers found that apps available on SuperBox devices could add your household connection to a residential proxy network.