Malwarebytes Labs

Thousands of outdated D-Link routers have been absorbed into the AryStinger botnet, with no future security updates available to protect them.

A seemingly official voicemail turned out to be a scam. Learn how document delivery scams work and what to do if you receive one.

A list of topics we covered in the week of June 15 to June 21 of 2026

Thousands of everyday websites were cleaned as part of a global operation targeting the malware network behind fake browser update scams.

Apple has patched a year-old Bluetooth vulnerability that could have let nearby attackers listen through Beats Studio Buds’ microphone.

Microsoft says it’s working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.

Retro gaming fans should be careful with GitHub projects that claim to be tools or plugins for their consoles. We looked at one example aimed at PlayStation Vita owners.

The photography giant confirmed a data breach after ShinyHunters claimed it stole 2.2 million records and threatened to leak them.

Attackers are using fake job offers and malware to steal accounts, Robux, and Roblox games from the developers who build them.

Researchers have uncovered an Android banking Trojan that targets more than 200 banking and cryptocurrency apps and can take over infected devices.

Researchers found an exposed collection of 24 billion stolen records, including usernames, passwords, and other sensitive account data.

Malwarebytes got top marks in independent tests against malware, phishing, and other online threats.

We found dozens of fake World Cup streaming sites using football as bait to funnel visitors through a malicious advertising network.

Cardiac monitoring provider iRhythm has been hit by a data theft followed by an extortion attempt.

Thanks to Uncle Sam, anyone trying to find nonconsensual intimate deepfakes on CFake.com and SOCFake.com will be disappointed.

We found EtherRAT malware being distributed by a website with a strange homepage. Following the trail, we discovered a vast network of malicious infrastructures, distributing malware, malicious documents, remote desktop software, and phishing pages. 

Anthropic has been ordered by the US government to cut off its newest Claude Fable 5 and Mythos 5 models for fear of abuse.

This week on the Lock and Code podcast, we revisit an episode from 2024 with David Chiu that shows the progress made against deepfake porn.

A list of topics we covered in the week of June 8 to June 14 of 2026

Apple and the Met Police are working together to make stolen iPhones harder to reset, resell, and profit from.