Survey finds AI companionship and fake explicit images widely feared
Malwarebytes says one in ten respondents report non-consensual AI nudes or threats to publish them.
34
Organization
Malwarebytes
- Mentions · 7d1
- Mentions · 30d21
- All mentions54
- First seenAug 12, 2026
- Last mentioned3d ago
Timeline
54 articles · newest firstPhone scams shift toward texts, voice clones, and QR codes
Consumers reported $470 million lost to text scams in 2024, and CrowdStrike says vishing doubled in early 2026.
36
PHP2Shell flaws draw early attacks; emergency PHP updates out
Fixes are in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35; both bugs are rated 9.2.
92
Claude Code reportedly finds hidden XMRig miner on a Mac
A Reddit user says the assistant saw about 1,175% CPU use and a LaunchAgent dated August 29; the report is unverified.
36
Malwarebytes weekly roundup page contains only a signup form
The supplied page text has no incidents, vulnerabilities, or other security stories from October 12 to October 18.
6
“Spray and pray” job applications could make it harder for you to spot a scam
Malwarebytes warns mass AI job applications can make fake recruiter messages harder for applicants to spot.
28
Is this link safe? Find out with Malwarebytes Scam Link Check
Malwarebytes launched free Scam Link Check so users can scan suspicious URLs for phishing and malware before clicking.
30
Scammers know your name, and they’re counting on you to reply
Text scammers use breach-exposed names to bait replies that can lead to crypto fraud.
38
Phishing emails are baiting your AI assistant
Phishing emails hide prompt injections that try to make AI inbox assistants endorse fraudulent payment changes.
58
A week in security (October 5 – October 11)
Malwarebytes' weekly security roundup page contains only a newsletter signup, with no incident details.
12
Security Awareness Training Isn’t Dead, but It Needs a Rethink
Practitioners say security awareness training has become compliance theater and cannot stop AI-scaled social engineering alone.
30
Amazon has an uncomfortably personal profile on you
Amazon’s About You page infers intimate traits from shopping data, and customers cannot fully opt out.
7
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
Malwarebytes says BlueKit PhaaS lets criminals launch brand-phishing sites and steal sessions in about ten minutes.
63
ASOS “hackers” send push notifications to customers
ASOS customers got in-app alerts claiming hackers fully compromised Snowflake and threatening to leak data.
64
Facebook Marketplace scam uses your name and number
Scammers text fake Facebook Marketplace listings using victims' names to provoke replies and confirm live numbers.
46
Malwarebytes Scam Link Check analyzes URLs and explains potential risks
Malwarebytes released a free Scam Link Check that rates pasted URLs and explains the risk.
34
A week in security (September 28 – October 4)
Malwarebytes posted a newsletter signup page with no substantive security news.
2
A week in security (September 28 – October 4)
Malwarebytes' weekly security page contains only a newsletter signup, with no incident details.
3
Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
Malwarebytes found 70 cloned crypto sites impersonating xStocks, Pendle, Zama and others that trick users into wallet connections and malicious token approvals.
40
Shadow AI explained: The work shortcut that could leak your company’s secrets
Malwarebytes explains shadow AI risks: unapproved chatbots and agents leak company data, with one in five organizations reporting linked breaches.
25
Convincing Free Mobile phishing emails appear after data breach
Convincing Free Mobile phishing emails demand €9.99 and harvest card data after a 2024 breach.
62
Fake iPhone Duo preorder scam triggers DarkSword attack
A fake iPhone Duo preorder page uses the patched DarkSword chain to steal iPhone data on visit.
74
A week in security (September 21 – September 27)
Malwarebytes weekly security page shows only a newsletter signup, with no incident details.
4
Kothamine malware uses Tailscale’s tailcat to evade network detection
Malwarebytes details Kothamine, a Windows RAT spread via npm that tunnels commands through Tailscale tailcat.
67
Criminals turn placeholder domain into ClickFix trap
Attackers registered documentation placeholder domain third-party.com and used it to serve Windows users a ClickFix fake-CAPTCHA page pushing a PowerShell downloader.
45
New Carbonato malware uses AI agents to hijack exposed Docker hosts
Carbonato botnet hijacks exposed Docker hosts, installs Hermes Agent, and spreads by scanning for more daemons.
76
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
ThreatsDay details the RemControl Android banking trojan, a ZCode source leak, and related phishing and ICS risks.
61
New Browser Guard features add protection before and after you click
Malwarebytes Browser Guard adds Search Reputation ratings and on-device LLM-powered Scam Guard Lite to block scams before and after clicking.
12
How device code phishing gives scammers access to your account
Device code phishing tricks users into approving a real OAuth sign-in, handing attackers account tokens.
46
Fake Claude Max giveaway tricks users into handing over their Google account credentials
Malwarebytes found a fake Claude Max giveaway that steals Google credentials via a spoofed sign-in.
56
Fake Claude Max giveaway hides a Google account phishing trap
A fake Claude Max giveaway uses a spoofed Google login window to steal account credentials.
57
Some cheap smart glasses are a security disaster
NSB Cyber and Abstract Shield found a dozen flaws in cheap smart glasses, including unauthenticated Bluetooth pairing letting attackers hijack cameras and intercept data.
35
Beware these fake websites selling subscriptions to AI assistants
Malwarebytes found fake sites selling AI assistant subscriptions that can bill cards and collect uploaded files.
54
The latest deepfake numbers give CISOs plenty to worry about
Gartner survey of 297 CISOs finds 41% faced deepfake audio-call social engineering incidents and 79% faced phishing or BEC in the past year.
45
Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions
Malwarebytes uncovered 100+ fake AI subscription sites built from a $249 toolkit, using genuine Google sign-in pages to sell unverified plans up to $2,000/year.
34
The AI plot to scan and destroy books (Lock and Code S07E19)
A Malwarebytes podcast details how Anthropic and Amazon scan and destroy books to train AI models.
36
The fake sites using a cheap toolkit to sell $2,000 AI subscriptions
More than 100 subscription websites linked through a shared toolkit impersonate existing products and sell AI subscriptions at varying prices.
0
Hackers Use Fake T-Mobile Rewards Expiry Texts to Lure Users to Phishing Sites
Malwarebytes tracks a T-Mobile smishing campaign using 1,000+ fake rewards-expiry text templates and 81+ disposable .top domains to steal credentials and payment data.
45
Scammers leave AI fingerprints all over fake antivirus renewal page
Malwarebytes found an AI-built fake Avast renewal page in Belgium whose contractor-style code comments show scammers now generate polished pages with AI.
42
Crypto customers targeted by scammers after email marketing provider breach
Attackers exploited a Brevo SAML SSO flaw to access 138 accounts and phish crypto customers of Trezor, CoinTracking, and BitBox.
75
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-84353<1%9.6Use-After-Free RCE in Google Chrome for Android Shared Tab Groups
- CVE-2026-84352<1%9.6Use-after-free in WebGL in Chrome for Android allows out-of-sandbox code execution
Appears with
- Malwarebytesvendor · 21
- Googlevendor · 8
- Googleorganization · 6
- Claudeai model · 6
- Applevendor · 6
- Microsoftorganization · 6
- Anthropicvendor · 4
- Amazonvendor · 4
- Microsoftvendor · 4
- Anthropicorganization · 4
- Cloudflareorganization · 3
- OpenAIorganization · 3
- FBIorganization · 3
- Metavendor · 3
- Windowsproduct · 2
- Androidproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.