Malwarebytes

Unexpected snail mail packages are being sent with scammy QR codes, warns FBI Receiving an unexpected package in the post is not always a pleasant surprise.

Receiving an unexpected package in the post is not always a pleasant surprise.

Apple ID scam leads to $27,000 in-person theft of Ohio man An Ohio man lost $27,000 after an Apple ID scam text hit his phone. The strangest part? It happened at his doorstep.

It started with Robert Wise receiving a text telling him that his Apple ID had been compromised, and it ended with Wise teaming up with the sheriff to catch his scammer.

Prison visitor details shared with all inmates at correctional facility A Florida correctional institution leaked the names, email addresses, and telephone numbers of visitors to the facility to every inmate.

The Everglades Correctional Institution (ECI) in Miami-Dade County has leaked the names, email addresses, and telephone numbers of visitors to the facility to every inmate.

Trump Administration and Big Tech want you to share your health data The Trump Administration is working with 60 companies on a plan to have Americans voluntarily upload their healthcare and medical data.

The plan announced on Wednesday allows Americans to voluntarily upload and transfer their medical records between healthcare facilities, technology companies, and health apps. However, privacy experts have raised concerns about this, warning that data segmentation is crucial to maintaining privacy.

That seemingly innocent text is probably a scam Scammers are using texts that appear to have been sent to a wrong number to get targets to engage in a conversation.

Scammers are using texts that appear to have been sent to a wrong number to get targets to engage in a conversation.

Apple patches multiple vulnerabilities in iOS and iPadOS. Update now! Apple has released important security updates for iOS and iPadOS patching 29 vulnerabilities, mostly in WebKit.

‼️ iPad and iPhone users, update now ‼️

Apple released a security update for iOS and iPadOS to patch multiple vulnerabilities.

mwb.link/44Y8U8Y

Tea Dating Advice app has users' private messages disclosed After the initial uproar about leaked images, a researcher was able to access Tea Dating app private messages

A few days after Tea Dating Advice discovered unauthorized access to one of its systems, which leaked 72,000 user images, the popular app faced another issue involving a separate database that exposed thousands of private messages.

Allianz Life says majority of 1.4 million US customers' info breached Allianz notified authorities about a data breach that exposed the information about almost all its US customers

Allianz notified authorities about a data breach that exposed the information about almost all its US customers.

Steam games abused to deliver malware once again A cybercriminal managed to insert malicious files leading to info stealers in a pre-release of a game on the Steam platform

Heads up gamers: another Steam Early Access title was compromised, spreading malware to players.
www.malwarebytes.com/blog/news/20...

iPhone vs Android: iPhone users more reckless, less protected online Lower rates for creating unique passwords, buying items from known websites, and using antivirus leave iPhone users at risk to online scams.

Who takes their security and privacy more seriously, iPhone or Android users?

Spoiler alert... This smartphone war has a clear winner: Android.

When you click the risky link your friend sent in the group chat and you see a Command Prompt briefly open and close.

'Car crash victim' calls mother for help and $15K bail money. But it's an AI voice scam A woman in Florida was tricked into giving thousands of dollars to a scammer after her daughter's voice was AI-cloned and used in a scam.

A woman in Florida was tricked into giving thousands of dollars to a scammer after her daughter’s voice was AI-cloned and used in a scam.

"Ring cameras hacked"? Amazon says no, users not so sure Ring users on TikTok, Reddit, and X are reporting multiple unauthorized device logins all dating back to May 28.

Ring users on TikTok, Reddit, and X are reporting multiple unauthorized device logins dating back to May 28.

Ring claimed on Friday that it's just a minor issue with information displaying inaccurately due to a backend update.

Chrome fixes 6 security vulnerabilities. Get the update now! Google has released an update for its Chrome browser to patch six security vulnerabilities including one zero-day.

‼️ Chrome users, update now! ‼️

Google has released an update for its Chrome browser to patch six security vulnerabilities, including one zero-day.

Meta AI chatbot bug could have allowed anyone to see private conversations A researcher has disclosed how he found a—now fixed—vulnerability in Meta AI that could have allowed others to see private questions and answers.

A researcher has disclosed how he found a—now fixed—vulnerability in Meta AI that could have allowed others to see private questions and answers.

Amazon warns 200 million Prime customers that scammers are after their login info Amazon has emailed 200 million customers to warn them about a rather convincing phishing campaign.

Amazon has sent out an alert to its 200 million customers, warning them that scammers are impersonating Amazon in a Prime membership scam.

Call Of Duty Hack — Windows Gamers Advised To Take Action Call of Duty: WWII has been pulled offline. What is an RCE hack?

Call of Duty: WWII was taken offline after players reported hackers took control of their PCs during live multiplayer matches.

Read our commentary on this vulnerability in Forbes.
www.forbes.com/sites/daveyw...

Download Malwarebytes, would ya?

CNN, BBC, and CNBC websites impersonated to scam people Cybercriminals are using sponsored ads and fake news websites to lure victims to investment scams.

Researchers have uncovered a large campaign impersonating news websites, such as those from CNN, BBC, CNBC, News24, and ABC News, to promote investment scams.

Deepfake criminals impersonate Marco Rubio to uncover government secrets Deepfake attacks aren't just for recruitment and banking fraud; they've now reached the highest levels of government.

Deepfake criminals impersonate Marco Rubio to uncover government secrets.

McDonald's AI bot spills data on job applicants The job applicants' personal information could be accessed by simply guessing a username and using the password “12345.”

Can I get uhhhhhhhhh your applicant data?

Millions of people spied on by malicious browser extensions in Chrome and Edge Researchers have discovered a campaign of malicious browser extensions that were available in the official Chrome and Edge web stores.

Millions of users affected by malicious Chrome and Edge extensions.

No thanks: Google lets its Gemini AI access your apps, including messages Google says it's Gemini AI will soon be able to access your messages, WhatsApp, and utilities on your phone. But we're struggling to see this as a good thing.

Google says it's Gemini AI will soon be able to access your messages, WhatsApp, and utilities on your phone. But we're struggling to see that as a good thing.

Ransomware negotiator investigated over criminal gang kickbacks If someone is going to negotiate with criminals for you, that person should at least be on your side.

A former employee of Digital Mint, a company specializing in ransomware negotiations, is accused of collaborating with a cybercriminal gang.

Gamers hacked playing Call of Duty: WWII—PC version temporarily taken offline The Call of Duty team confirmed that the PC edition of WWII has been taken offline following "reports of an issue."

The PC version of Call of Duty: WWII was taken offline on Saturday after players reported hackers took control of their PCs during live multiplayer matches.

Free certificates for IP addresses: security problem or solution? Let's Encrypt has started rolling out certificates for IP addresses. Although it's a security solution it also offers cybercriminals opportunities.

Let's Encrypt has started rolling out certificates for IP addresses. Although it's a security solution it also offers cybercriminals opportunities.

Microsoft, PayPal, DocuSign, and Geek Squad faked in callback phishing scams Callback phishing scam emails are masquerading as messages from popular brands used for everyday tasks that put small businesses at risk.

Callback phishing scam emails are masquerading as messages from popular brands used for everyday tasks that put small businesses at risk.

Us protecting your PC like

Qantas: Breach affects 6 million people, "significant" amount of data likely taken Australian airline Qantas has confirmed a data breach at a third party provider that affects six million customers.

While you're jetting off on your summer holidays, cybercriminals may have taken off with your personal information.

Facebook wants to look at your entire camera roll for "AI restyling" suggestions, and more Facebook's pursuit of your personal data continues apace, and now it has a new target: photos on your phone that you haven't shared with it yet.

Facebook's pursuit of your personal data continues, and now it has a new target: photos on your phone that you haven't shared with it yet.